04 / Cybersecurity policy & supplier assurance
European Commission — Cybersecurity Act 2.0
Bringing the practical perspective of a cybersecurity SME and technology supplier into policy discussion.
The initiative
The work contributes to discussion surrounding the revision of the EU Cybersecurity Act and related amendments to the NIS2 framework.
Key topics include cybersecurity certification, supply-chain assurance, supplier sovereignty, third-country dependencies and reducing duplicative compliance requirements for European ICT SMEs.
ACS participates from the perspective of a European cybersecurity SME and technology supplier, alongside the team involved in the revision process.
Our participation & contribution
Advanced Cyber Security has contributed recommendations on:
- Risk-based and evidence-based assessment of supplier sovereignty.
- Distinguishing technical cybersecurity assurance from sovereignty and dependency assurance.
- Broader reuse of European cybersecurity certification in NIS2 supplier due diligence.
- Reducing duplicative customer questionnaires and national assurance requirements for certified SME suppliers.
This page describes ACS participation and policy recommendations. It does not imply institutional endorsement or that the recommendations have been adopted.