Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT supply chain
A new legislative proposal has been published that aims to amend and expand the existing Cybersecurity Act (Regulation EU 2019/881). The proposal introduces changes to ENISA's mandate, the European cybersecurity certification framework, and ICT supply chain security requirements. The proposal is currently in draft stage and not yet in force.
What changed
- Expansion of ENISA's mandate and responsibilities
- Updates to the European cybersecurity certification framework
- New requirements for ICT supply chain security
- Repeal and replacement of Regulation (EU) 2019/881
Who is affected
Organizations subject to EU cybersecurity regulations, ICT service providers, manufacturers, and entities involved in the ICT supply chain
- Action
- Action required
- Language
- EN