3 articles tagged compliance.
On 11 September the EU Cyber Resilience Act's reporting obligations switch on: 24 hours for an early warning, 72 for a full notification, 14 days after a fix for the final report. Almost every guide is written for manufacturers. If you buy and operate devices rather than make them, here is what actually changes — and the six questions to add to procurement this month.
From September 11, 2026, manufacturers of connected products sold in the EU must report actively exploited vulnerabilities to ENISA within 24 hours. The obligation reaches routers, cameras, smart-building devices and OT, carries fines up to €15 million or 2.5% of global turnover, and reshapes how buyers should evaluate vendors. With roughly 90 days to go, two-thirds of vendors say they are still unfamiliar with the regulation.
Your smart building systems shouldn't share a network with your financial data. Here's how to implement IoT segmentation that actually works in enterprise environments.