The European Union has launched last January a new Cybersecurity Packge whose objective is to simplify the cybersecurity requirements that allowed to develop NIS 2. This Directive encouraged companies to develop a cybersecurity governance framework that could detect the incident at the shortest posible time, isolate to avoid large damages and solve it, counting with the international cooperation. Now, the European Union launches the New Cybersecurity Package that includes the review of the Cybersecurity Act, proposing a horizontal framework to address the risks coming from third parties. The interest, apart from simplifying the cybersecurity compliance process is the use of certification as a “tool to enhance reputation and meet legal obligations”. Certification in many cases is perceived as a cost. However, in a field like cybersecurity overcrowded with tools and services, a turning point is for sure to count on enough processes that allow to minimize incidents, considering the software development process from the very begining. Enjoy the reeading!
