Regulation & Policy
-
EU sets cyber plan for advanced AI
The European Commission has set out an action plan linking advanced AI, cyber defence, model evaluation, and existing EU laws including NIS2, DORA, and the Cyber Resilience Act.
-
Cyber resilience Bill advances in Lords
The UK Cyber Security and Resilience Bill has reached Lords second reading, extending debate around essential services, suppliers, reporting, and resilience.
-
UK regulators begin cloud provider oversight
AWS, Google Cloud, Microsoft, and Oracle are the first critical third parties brought under direct UK financial-sector resilience oversight.
-
ENISA turns CRA readiness towards SMEs
ENISA has published a Cyber Resilience Act maturity model for smaller organisations that manufacture, integrate, or support products with digital elements.
-
EU sets plan for AI cyber risk
The European Commission’s plan links advanced AI, model evaluation, critical infrastructure protection, open-source security, and Europe’s cyber capability base.
-
UK and EU sanction Russian cyber networks
The coordinated package targets Russian state-linked cyber operators, criminal proxies, Lumma Stealer actors, and information operations tied to attacks across Europe.
-
NCSC opens Cyber Essentials Pathways
The NCSC is widening Cyber Essentials Pathways, giving complex organisations a managed route to show equivalent security outcomes without weakening certification trust.
-
SAP commitments shift ERP support risk
SAP’s binding EU commitments on maintenance and support reshape a long-running enterprise dependency issue for organisations still running critical ERP systems.
-
Commission turns NIS2 delays into court action
Ireland, Spain, France, and the Netherlands face EU court action after failing to complete NIS2 transposition, extending regulatory uncertainty across major European markets.
-
EU prepares cyber reserve support for Moldova
Council agenda material shows the EU moving to authorise Cybersecurity Reserve support for Moldova, placing cyber assistance inside Europe’s neighbourhood resilience and hybrid threat posture.