Cyber resilience for products with digital elements (“CRA”)

Consumer protection legislation mandating certain essential cybersecurity requirements for products with digital elements and their manufacturers in order to get a CE marking in the EU.

High common level of cybersecurity for entities (“NIS 2”)

Horisontal legislation to achieve a high common level of cybersecurity for services, establishing national capabilities, cooperation at a EU level, and risk-management measures for entities.

Digital operational resilience in the financial sector (“DORA”)

Comprehensive legislation on various cyber security topics including an oversight framework for service providers, applies to nearly all types of financial entities in the EU.