CRA Cybersecurity ECS Educational General News

Cyber Resilience Act Single Reporting Platform (CRA-SRP) obligations for software companies selling globally

I wrote here about the CRA and the deployment plan: https://www.sorinmustaca.com/eu-cyber-resilience-act-cra-overview/  We are past September 11th and the Art. 14 of CRA is applying. Who is affected? Is a a company from a non EU country, which sells software globally affected by the CRA Art. 14? Any company is affected if the software is made […]

Certification CRA Cybersecurity ECS Educational General News Security SSDLC

EU Cyber Resilience Act (CRA) – Overview (Updated Oct 2026)

What is the Cyber Resilience Act – CRA The Cyber Resilience Act is the first European regulation to set a mandatory minimum level of cyber security for all connected products available on the EU market – something that did not exist before. The CRA is a regulation from the European Union — formally Regulation (EU) 2024/2847 […]

Certification Cybersecurity DORA NIS2

Understanding NIS2 and DORA: What executives need to know

These days businesses are subject to increasing regulatory scrutiny, particularly regarding cybersecurity and operational resilience. Two significant EU regulations, NIS2 (Network and Information Systems Directive 2) and DORA (Digital Operational Resilience Act), outline mandatory requirements for organizations. Failure to comply can result in severe penalties. It is essential for executives to understand how these regulations […]

Automotive Certification Cybersecurity ECS Educational General NIS2 Security

How-To: NIS2 EU Directive

The NIS2 Directive is a European Union legislative text on cybersecurity that supersedes the first NIS (Network and Information Security) Directive, adopted in July 2016. NIS vs. NIS2 While the first NIS (Network and Information Security) Directive increased the Member States’ cybersecurity capabilities, its implementation proved difficult, resulting in fragmentation at different levels across the […]

Spam & Phishing

Writing my review of the EU Spam Symposium

I have started to write my review of the Symposium. Briefly, it was ok, but as any conference, there were also some negative aspects. If the review will not be published in Virus Bulletin, I will also publish it here. More details later. Until then, have a look at the presentations: http://www.spamsymposium.eu/archivewebcast.htm