nOn November 30,nnEuropean Parliamentnnand thennEuropean Councilnnagreed to the final of text of ThennEuropean Cyber Resilience Act.nnThis bill sets up the legal frameworks for hardware and software productsnmarketing in the EU. Parliament and the Council must now formally adopt thenfinal text. Once approved, affected entities will have 36 months to adoptnthe requirements of the CRA.n
nnWhat Does This Mean for Cybersecurity Professionals?n
nnThe exact text of the final agreement has not yet been made available but isnexpected to be released publicly in early 2024.n
nnIf adopted, the new rules would likely go into effect three years after thenlaw enters into force. This gives affected entities time to adapt theirnpolicies and procedures and fit the new requirements.n
nnWhat ISC2 Members Need to Known
nnProviding security professionals with the tools they need to understand hownto analyze risk and understand compliance to increase cyber resilience isncritical for the success of the entire cyber ecosystem. ISC2 offers severalnnRisk Management Practitioner Certificatesnnto help cyber professionals stay ahead of the curve through professionalndevelopment or explore pathways to thennISC2 CGRC Certification.nn
nnAdvanced cyber practitioners already familiar with sector frameworks maynconsider taking their knowledge to the next level by getting certified innnGovernance, Risk and Compliance (CGRC)nn. In training for this certification, there will be a comprehensive reviewnof information systems security concepts and industry best practices,ncovering the seven domains of the CGRC Common Body of Knowledge (CBK).n
nnRead more on hownE.U.’s Computer Resilience Act Rewrite Clarifies VulnerabilitynReporting, Product Classes non ISC2 Insights.n
nnnISC2 Skill Builders for Security Operationsnn- These courses are free for ISC2 members. There is a nominal fee fornnon-members.n
nnnISC2 Think Tank Webinarsnnprovide helpful insights into the latest cybersecurity trends, thoughtnleadership and best practices. There are a variety of webinars availablenfree of charge on the ISC2 website on topics like emerging technologies andnstrategies for CISOs in a transforming job market.n
]]>