Regulation & Policy
-
UK opens telecoms security regime review
The government has opened the statutory review of Britain’s telecoms security framework, asking whether rules introduced after the 2019 supply chain review are delivering measurable improvements in network security and resilience.
-
CRA standards enter formal approval process
Seventeen product-specific cybersecurity standards have entered public enquiry as Europe moves from the Cyber Resilience Act’s legal requirements towards the technical rules manufacturers can use to demonstrate conformity.
-
Netherlands begins NIS2 enforcement
Thousands of Dutch organisations are now subject to NIS2 security, reporting, governance, and resilience duties after two long-awaited laws took effect on 15 August.
-
Germany moves to widen intelligence cyber powers
Germany’s cabinet has approved draft legislation that would give its intelligence agencies broader cyber, surveillance, and active intervention powers in response to growing hybrid threats.
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
Belgian eID flaws exposed trust-chain weaknesses
Flaws in software connecting Belgian electronic identity cards to web services exposed card data, PIN handling, signing functions, and local code execution across a widely deployed digital-trust system.
-
Belgian eID flaws exposed trust-chain weaknesses
Flaws in software connecting Belgian electronic identity cards to web services exposed card data, PIN handling, signing functions, and local code execution across a widely deployed digital-trust system.
-
Can boards truly be accountable for cyber resilience if they can’t measure it?
Paul Cragg, CTO at NormCyber, argues that board accountability for cyber resilience depends on continuous, evidence-based measurement rather than fragmented reporting and point-in-time assurance.
-
ICO orders Met to improve data governance
The ICO has ordered the Metropolitan Police to improve training, monitoring, and governance after sensitive disclosures exposed weaknesses in both human handling and technical safeguards.