Insights / Framework and Regulatory Updates

What changed and why it matters.

Timely notes on the standards and rules that shape your obligations, and what they mean for the operating model.

Read the updates.

Each update covers what changed, the key dates, and the program work it calls for. Each one links to its sources.

Illustration of a shield with a clock face connected to hardware and software products, representing EU Cyber Resilience Act reporting deadlines.

EU Regulation

The EU Cyber Resilience Act is live: what changed in 2026 and what comes next

Reporting obligations started on 11 September 2026. See what changed this year, what is still pending, and how to prepare for December 2027.

Read the update

Start with the program, not the framework.

Talk with a senior advisor about the decisions, ownership, and operating capability your organization needs next.

A conversation with a senior practitioner, not a sales gatekeeper.