Stefano de Crescenzo

In recent years, the EU has introduced a range of new incident and vulnerability reporting obligations across several frameworks, including the NIS 2 Directive, the Cyber Resilience Act and the Digital Operational Resilience Act. While these requirements have the potential to strengthen situational awareness and collective resilience, covered entities’ difficulties with navigating multiple overlapping frameworks can slow down the sharing of actionable insights. To address this, the Digital Omnibus proposes to streamline reporting through a new Single Entry Point (SEP). This session will examine how incident and vulnerability reporting is set to change in the EU, what this means for critical infrastructure operators and other covered entities and how to ensure these requirements translate into tangible cybersecurity benefits for Europe.