By 28 June this year, the EU Commission’s current work programme (Union Rolling Work Programme, URWP) is to define a list of ICT products and services relevant to the implementation of the EU Cybersecurity Act (CSA, Regulation EU 2019/881), which is eagerly awaited by companies as well as associations and public authorities. Nevertheless, in the last few months since the CSA came into force on 27 June 2019, things have become quiet, at least in the public debate. This is not to say, however, that the first structures for implementing the CSA and drawing up the corresponding certification schemes are not already being created in the background.
Read the full article here.