Recital 52 Promote the use of open source and standards

Open-source cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; tools and applications can contribute to a higher degree of openness and can have a positive impact on the efficiency of industrial innovation. Open standards means a standard as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council (^29^); Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12). facilitate interoperability between security tools, benefitting the security of industrial stakeholders. Open-source cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; tools and applications can leverage the wider developer community, enabling diversification of suppliers. Open source can lead to a more transparent verification process of cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; related tools and a community-driven process of discovering vulnerabilities means a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat;. Member States should therefore be able to promote the use of open-source software means the part of an electronic information system which consists of computer code; and open standards means a standard as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council (^29^); Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12). by pursuing policies relating to the use of open data and open-source as part of security through transparency. Policies promoting the introduction and sustainable use of open-source cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; tools are of particular importance for small and medium-sized enterprises means a financial entity that is not a small enterprise and employs fewer than 250 persons and has an annual turnover that does not exceed EUR 50 million and/or an annual balance sheet that does not exceed EUR 43 million; facing significant costs for implementation, which could be minimised by reducing the need for specific applications or tools.