Talk to us
Knowledge

Cybersecurity knowledge base

Articles on the standards, regulations and directives that shape security work, and trainings that explain the technology behind it.

Published The AI ActCybersecurity is essential to building trust in AI and to protecting users and society, under the EU's AI Act, which introduces comprehensive legal requirements from 2027.Read morePublished CRA – cybersecurity requirements for connected productsThe EU Cyber Resilience Act (CRA) sets binding cybersecurity requirements for connected products sold on the EU market. Manufacturers already have to report actively exploited vulnerabilities and severe incidents to the EU's single reporting platform. When the regulation applies in full at the end of 2027, manufacturers, importers and distributors must make sure connected products carry the CE marking. Among other things, this means classifying products into security classes and managing risks and vulnerabilities as the regulation requires. Each security update must also remain available for at least ten years.Read morePublished DORAThe EU regulation on digital operational resilience, the Digital Operational Resilience Act (DORA), aims to strengthen the financial sector through penetration testing and remediation plans. From 17 January 2025, all firms must comply with the legal requirements.Read morePublished GDPR — The Data Protection Regulation that Protects Personal PrivacyPersonal privacy deserves protection in society. That is the background to the data protection regulation that has applied throughout the EU since 2018.Read morePublished NIS2 — Tighter Cyber Requirements for Essential ServicesThe NIS2 Directive is implemented in Sweden mainly through the Cybersecurity Act and the Cybersecurity Ordinance, which entered into force on 15 January 2026. The Act replaces the previous NIS Directive and covers significantly more…Read more