4 results found

The EU Cyber Resilience Act's incident reporting requirements are now in effect for manufacturers of connected products, with the ENISA single reporting platform operational since September 2026. Manufacturers must navigate complex notification timelines ranging from 24 hours to one month depending on incident severity, with potential fines reaching EUR15M or 2.5% of global turnover for non-compliance starting December 2027. Understanding these cascading reporting obligations to CSIRTs, ENISA, and affected

The U.K.'s Energy Savings Opportunity Scheme (ESOS) Phase 4 brings mandatory energy assessment requirements for large businesses, with critical compliance deadlines approaching in 2026 and 2027. Understanding qualification criteria, new reporting obligations, and enforcement consequences is essential for organizations that may fall within scope, including those affected by recent structural changes or M&A activity.