From EU Cyber Act Regulation to Industry Adoption: The Challenge in Front of Us (P10c)
The road to EU Cyber Act adoption has brought us to this moment in 2025 where industry translation of the regulatory result to the emerging definition of security industry best practices for ICT product definition, development and manufacturing is upon us. In order for the intent of the EU Cyber Act to be realized with the impact and success envisioned by the regulators, this transition must find the balance in the marketplace between security assurance, economic forces, competitive forces and available technical capabilities. From the industry perspective, newly deployed certification schemes under EUCC bring both new and legacy challenges in terms of achieving security assurance scale with feasible economic impact across the product, portfolio and industry levels. Closer alignment of EUCC certification schemes to the business objectives of the markets will be required in order to achieve the envisioned impact of the EU Cyber Act. Given the changes in the overall cyber security landscape that are occurring as a result of the Cyber Act, the perfect opportunity exists today to discuss, develop and deploy methods that can serve all stakeholders in achieving the security assurance scale as envisioned by the original EU Cyber Act regulatory vision.