Key regulatory pillars now define the cybersecurity obligations of manufacturers, operators and trust-service providers across the European Union. Select a regulation to explore its timeline, obligations and the assessment paths IoTr supports.
At a glance
CRA
The CRA introduces horizontal cybersecurity requirements for hardware and software placed on the EU market, covering the entire product lifecycle: secure-by-design development, vulnerability handling, and post-market surveillance.
NIS2
NIS2 expands the scope of essential and important entities across 18 sectors, imposes minimum risk-management measures, and aligns reporting and supervision regimes across Member States.
AI Act
The AI Act classifies AI systems by risk and imposes conformity assessment, transparency, and post-market monitoring on high-risk systems many of which include cybersecurity-relevant components.
eIDAS 2
The revised eIDAS regulation establishes the EUDI Wallet, expands the catalogue of qualified trust services, and defines certification schemes for wallet implementations and trust service providers.
We’ll send you access by email.
