The Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
summary
European rules NIS2 and the Cyber Resilience Act create concrete obligations: personal liability rises to €10 million per incident, thresholds apply (organizations >50 employees or >€10M revenue, DNS providers always in scope), and supply chain checks must go beyond questionnaires. Compliance requires mapping how OpenSSF Scorecard, Security Baseline, Common Criteria (EAL) and ISO 27001 overlap and where blind spots remain; ISO27001 is not a guaranteed NIS2 pass. Practical steps, gaps and certification tradeoffs get enumerated.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 3:09Speaker background
- 5:18SUSE mission
- 7:26Dutch Open Source Alliance
- 9:54Perfect storm concept
- 10:58Digital threats
- 13:25International turbulence
- 15:51Digital sovereignty solution
- 17:13EU regulations and cyber resilience
- 19:24NIS 2 compliance requirements
- 23:18ISO 27001 blind spots
- 25:52Common Criteria EAL4+
- 28:00Beyond compliance sovereignty
- 28:44Digital sovereignty defined
- 30:13Open source sovereignty
- 32:44Low-hanging sovereignty fruit
- 34:30Open source TCO
- 37:45SUSE’s sovereignty role
- 39:57Open by design sovereign by choice
- 40:38Closing thoughts
- 41:03Q&A
related talks
01h 01mNIS2 & CRA: Europe's Response to Cyber Shenanigans
11mThe Day the EU Broke My Build: NIS2 for Developers
22mThe New IT Security Law NIS2 - Are You Affected and What Do You Need to Do?
33mCompliance and NIS2
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
01h 12mCYBERSECURITY FOR EUROPE: FOSTERING RIGHTS THROUGH TECHNOLOGY
15mEuropean Cybersecurity Regulations who's who