CSA2.0提案：新的ECCF - 迈卡·福伦巴赫欧盟委员会.pdf

1、Cyber Security Act 2(CSA2)Proposal:the New ECCFCNECT 26 January 2026 AdobeStock,Looker_StudioCSA2:Creating European cyber services ecosystemBased on the following pillars:1.Develop a framework for addressing the ICT supply chain security challenges in critical infrastructure.2.Simplify and enhance t

2、he European cybersecurity certification framework.3.Introduce simplification measures to reduce unnecessary administrative burden related to the implementation of the NIS2 Directive.4.Strengthened European Union Agency for Cybersecurity(ENISA)to make it fit for purpose.European Cybersecurity Certifi

3、cation FrameworkEuropean Cybersecurity Certification Framework AdobeStock,loechai Cybersecurity certification increases trust and security in the internal market and facilitating compliance.Certification ICT product,services,processes and managed security services or cyber posture Addressing Technic

4、al risk factors High-risk suppliers and their key ICT assets excluded from certificationClarified and extended scope(1)Certification updated and fully synergised with existing Union law(alignment with the CRA)as a simplification tool to demonstrate compliance with CRA&NIS2 and potentially other lega

5、l acts(organisation cyber posture scheme to enable complified compliance)harmonised across schemes through model provisions(user-friendly reference provisions to harmonise templates across schemes)Certification as Compliance Tool(2)Efficient procedure and effective governance(3)The scheme owner Over

6、sight of the procedure and implementationStrategic planning and requesting of schemesAdoption and review of schemesThe scheme managerThe scheme implementorConsulted in every step of the way(ECCG,Comitology)Certification issuers through NCCAsAccreditations and