cyber.hendryadrian.com
Security News · darkowl.com

UK and EU Cybersecurity Rules Extend Accountability Across Supply Chains

· Original article ↗

Summary

A webinar discusses how the EU Cyber Resilience Act, NIS2 and the UK Cyber Security and Resilience Bill expand cybersecurity duties, including continuous monitoring, supply-chain oversight and incident reporting.

Key points

  • The speakers describe a shift from voluntary security standards to mandatory obligations, point-in-time checks to continuous monitoring, and perimeter-focused controls to supply-chain risk management.
  • The Cyber Resilience Act covers products with digital elements sold in the EU, with lifecycle security obligations and vulnerability reporting timelines discussed in the webinar.
  • NIS2 expands obligations for essential and important entities, including risk management and incident reporting; the UK bill is described as extending requirements to managed service providers.
  • Organizations are advised to map suppliers and dependencies, review contracts, monitor vulnerabilities, maintain software bills of materials, and rehearse incident-notification procedures.
  • The speakers say government threat intelligence is valuable but cannot provide organization-specific visibility into products, suppliers and exposed credentials; they recommend tailored, continuous monitoring.
  • DarkOwl presents its DarkSonar risk score as a way to assess darknet exposure of company domains and staff credentials, citing a test in which its signal rose before 74% of 237 attacks.

Article Details

Event Type
Webinar discussion of cybersecurity regulations and supply-chain resilience in the UK and EU.
Impact
The discussion describes expanding mandatory cybersecurity duties, continuous monitoring, supply-chain risk oversight, and incident-reporting requirements for organizations in scope. It highlights potential compliance burdens and penalties, and the need for manufacturers, operators, and managed service providers to prepare; no specific cyber incident or direct organizational impact is reported.

People

Lindsay WhyteDarkOwl Regional Director and webinar speaker discussing supply-chain security and DarkSonar.Rich HanstockLegal expert, barrister, and founder of pwn.legal who discusses cybersecurity regulations; the article also spells his surname as “Handstock.”

Vendors

DarkOwl“New Regulations and What They Mean for Your Supply Chain,” features legal expert Rich Hanstock and DarkOwl’s Lindsay Whyte as they unpack the evolving cybersecurity regulatory landscape across the UK and EU.

Products

DarkSonarLindsay:  Yeah, when we were sort of thinking about this, we developed something called DarkSonar.

Countries

United Kingdomand DarkOwl’s Lindsay Whyte as they unpack the evolving cybersecurity regulatory landscape across the UK and EU.

Industries

BankingNIS2 then, if you’re kind of an essential or important operator in say energy, transport, banking, health, infrastructure, those kinds of sectors, in the UK this is expanding to MSSPs, you’re going to have similar kindEnergyNIS2 then, if you’re kind of an essential or important operator in say energy, transport, banking, health, infrastructure, those kinds of sectors, in the UK this is expanding to MSSPs, you’re going to have similar kindHealthNIS2 then, if you’re kind of an essential or important operator in say energy, transport, banking, health, infrastructure, those kinds of sectors, in the UK this is expanding to MSSPs, you’re going to have similar kindTransportationNIS2 then, if you’re kind of an essential or important operator in say energy, transport, banking, health, infrastructure, those kinds of sectors, in the UK this is expanding to MSSPs, you’re going to have similar kind

Related Articles