Call us now:
Thank you for posting Sarah Fluchs. Along side EU NIS 2, DORA and the recent announcement that the EU is regulating software through the liability for defective products directive. The CRA is a regulation that organisation trading in and with the EU should be aware.The CRA is on the EU Journal, and will come into effect in December 2024. Fines up to EUR 15million or 2.5% of global turnover will apply for non compliance. The CRA introduces a range of requirements that the designers, manufacturers and distributors of digitally enabled products and services must be aware, if they want to sell their products across EU member states. Generally, much like GDPR, one does not expect companies covered by the CRA to feel the force of the Act until there are breaches in cybersecurity. At which point obvious questions about compliance oversight, assurance and attestation to the CRA will be considered. The management of the CRA will not be simple. @Thaddeus Dziekanowski Brian D. McCarthyVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7265278648839024640