Security News & Regulatory Intelligence

NIS2 Transposition Status: Where EU Member States Actually Stand

The 17 October 2024 transposition deadline came and went with most member states still finalizing their national laws. Here's why that matters for your actual compliance date.

DORA Is Now Applicable: What Actually Changed on January 17, 2025

Unlike NIS2, DORA needed no national transposition — it became binding across the entire EU financial sector on a single day. Here's what that actually triggers.

PCI DSS 4.0's Future-Dated Requirements Are Now Mandatory

The subset of PCI DSS v4.0 requirements that were 'best practice until' 31 March 2025 are now simply requirements. Expanded MFA is the one most organizations still have work on.