EU Main Cyber Standards and Regulations

EU Commission Delegated Regulation 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats

October 23, 2024February 28, 2026
Cross-Sector, Government, Cyber Resilience, EU, Law / Regulation, EU, RC - Recover

Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplements Regulation (EU) 2022/2554 by establishing regulatory technical standards that specify the content and time limits for reporting major ICT-related incidents… Read More »EU Commission Delegated Regulation 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats

EU Regulation 2019/1020 Cyber Resilience Act (CRA)

October 23, 2024March 6, 2026
Cross-Sector, Government, AppSec, EU, Law / Regulation, SoFa, PS - Platform, PR - Protect, EU, IR - Infrastructure

The EU Cyber Resilience Act (CRA) is a regulation aimed at enhancing cybersecurity for hardware and software products with digital elements placed on the EU market. It establishes mandatory cybersecurity… Read More »EU Regulation 2019/1020 Cyber Resilience Act (CRA)

EU Regulation 2024/1689 Artificial Intelligence Act (AI Act)

July 12, 2024March 14, 2026
OC - Org. Context, Cross-Sector, Government, GV - Govern, RM - Risks Mgt, EU, Law / Regulation, EU

The EU AI Act is the first comprehensive legal framework regulating artificial intelligence in Europe, designed to foster trustworthy AI while protecting fundamental rights, safety, and ethical principles. It classifies… Read More »EU Regulation 2024/1689 Artificial Intelligence Act (AI Act)

EU Commission Delegated Regulation 2024/1773 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

April 13, 2024March 3, 2026
Cross-Sector, Government, EU, Law / Regulation, Cyber Resilience, EU, RC - Recover

Commission Delegated Regulation (EU) 2024/1773 of 13 March 2024 supplements Regulation (EU) 2022/2554 (DORA) by establishing regulatory technical standards that specify the detailed content required in policies governing contractual arrangements… Read More »EU Commission Delegated Regulation 2024/1773 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

EU Regulation 2024/1183 eIDAS v2 on Electronic Identification

April 11, 2024March 13, 2026
Cross-Sector, Government, Identity, AC - Access Control, EU, Law / Regulation, DS - Data Security, PR - Protect, EU

Regulation (EU) 2024/1183 of the European Parliament and of the Council, adopted on 11 April 2024, amends Regulation (EU) No 910/2014 to establish the European Digital Identity Framework. Its core… Read More »EU Regulation 2024/1183 eIDAS v2 on Electronic Identification

EU Commission Delegated Regulation 2024/1774 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework

March 13, 2024March 6, 2026
Government, Cross-Sector, Cyber Resilience, EU, Law / Regulation, EU, RC - Recover

EU Commission Delegated Regulation 2024/1774 of 13 March 2024 supplements Regulation (EU) 2022/2554 (DORA) by specifying regulatory technical standards (RTS) that detail ICT risk management tools, methods, processes, and policies… Read More »EU Commission Delegated Regulation 2024/1774 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework

EU Commission Delegated Regulation 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents

March 13, 2024March 6, 2026
Cross-Sector, Government, Law / Regulation, Cyber Resilience, EU, EU, RC - Recover

Commission Delegated Regulation (EU) 2024/1772 of 13 March 2024 supplements Regulation (EU) 2022/2554 by establishing regulatory technical standards (RTS) that specify the criteria for classifying ICT-related incidents and cyber threats… Read More »EU Commission Delegated Regulation 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents

EU Directive 2022/2555 Network and Information Security Directive (NIS2)

November 28, 2022March 3, 2026
Cross-Sector, Government, EU, Law / Regulation, Cyber Resilience, EU, RC - Recover

The EU NIS 2 Directive, formally known as Directive (EU) 2022/2555, establishes a unified legal framework to enhance cybersecurity across the European Union by setting stricter and more comprehensive requirements… Read More »EU Directive 2022/2555 Network and Information Security Directive (NIS2)

EU Regulation 2022/2554 Digital Operational Resilience Act (DORA)

April 27, 2022March 6, 2026
Government, Cyber Resilience, EU, Finance, Law / Regulation, EU, RC - Recover

The EU Digital Operational Resilience Act (DORA) is a regulation that came into effect on January 17, 2025, aimed at strengthening the digital resilience of financial entities across the EU.… Read More »EU Regulation 2022/2554 Digital Operational Resilience Act (DORA)