NCC Group, a United Kingdom-based cybersecurity organization, has welcomed the European Commission’s proposals to modernize the European Union’s Cybersecurity Act and sign the policy with the NIS2 Directive and the Cyber Resilience Act.
The draft reforms aim to simplify compliance requirements while promoting a more resilient and secure digital ecosystem across the region, NCC Group said Tuesday.
What Will Change Under the Proposed EU Cybersecurity Act Reform?
According to the EC, in its explanatory memorandum, the threat landscape has evolved significantly since the adoption of the Cybersecurity Act in 2019. New technologies, such as artificial intelligence and quantum computing, are also rapidly changing not just how organizations defend their systems, but the cyber tactics of malicious actors, the commission added.
The proposed revisions aims to address four issues in the current version of the Cybersecurity Act: the misalignment to the EU’s existing cybersecurity policies and the present needs of stakeholders in an increasingly more complex threat landscape, the diversity of the cybersecurity-related policies putting a restraint in the region’s cyber posture, the stalled implementation of the European cybersecurity certification framework, and security risks associated with Information and Communications Technology supply chains.
“Clearer, coherent rules will help organisations manage real threats without duplicating compliance. Strengthening supply chain assurance on transparent, technical, EU wide criteria, together with better incident preparedness, intelligence sharing and skills, will lift resilience,” commented Philipp Strassmann, senior vice president for Northern Europe markets and managing director for Fox IT at NCC Group. “Given today’s cross border risks, close cooperation with likeminded partners, especially the UK.”
How Will the Proposed Cybersecurity Act Revisions Affect the EU?
The commission’s impact assessment revealed that the revisions to the cyber legislation would lead to increased competitiveness by harmonizing regulations, giving businesses from across the region clear guidance toward compliance.
The revisions will also reduce administrative burdens and promote a digital-first approach, enabling faster and more reliable data exchange and decision making.