Revised Cybersecurity Act

The European Commission has proposed a revised Cybersecurity Act aimed at enhancing cybersecurity in the EU and securing ICT supply chains. The proposal includes measures to simplify compliance with EU cybersecurity rules and risk management requirements for companies operating in the EU.

Key Points of the Proposal

• Increase Legal Clarity: The targeted amendments to the NIS2 Directive aim to increase legal clarity and ease compliance for 28,700 companies, including 6,200 micro and small-sized enterprises.
• Mandatory Derisking: The Cybersecurity Act will enable the mandatory derisking of European mobile telecommunications networks from high-risk third-country suppliers, building on the work already carried out under the 5G security toolbox.
• Central Incident Reporting Point: The proposal complements the single-entry point for incident reporting proposed in the Digital Omnibus.

These measures are intended to enhance the EU's resilience to cyber threats and ensure the security of critical infrastructures.