3 terms
The CRA, or Cyber Resilience Act, is an EU regulation setting mandatory cybersecurity requirements for hardware and software products sold in the EU.
DORA, the EU Digital Operational Resilience Act, requires financial entities to manage ICT risk, report major incidents and oversee ICT providers.
NIS2 is the EU directive that requires essential and important entities to manage cybersecurity risks, report significant incidents and accept supervision.