Regulatory Landscape Accelerates
The U.S. strategy focuses on shifting cybersecurity responsibilities to well-equipped entities while prioritizing long-term resilience. Key initiatives in 2024 included securing IoT devices, preparing critical infrastructure for advanced threats, and enhancing global partnerships. Additionally, an executive order was issued to strengthen maritime cybersecurity, protecting U.S. ports from cyberattacks. Singapore’s updated masterplan focuses on securing operational technology (OT) systems, which are crucial for infrastructure such as energy grids and traffic control. By embracing secure-by-design principles, the plan ensures these systems remain resilient throughout their lifecycle. It represents a collaborative effort among manufacturers, users, and regulators to address the increasing threats posed by state-sponsored and organized cybercrime. In 2024, the European Union made significant strides to strengthen its cybersecurity framework, with a focus on critical infrastructure and digital product security. The NIS2 Directive, enforced in October, boosts resilience in key sectors like energy, healthcare, and transportation. It requires breach reporting within 24 hours, introduces mechanisms for coordinated responses to cyberattacks, and imposes fines for non-compliance. Additionally, the Cyber Resilience Act (CRA) mandates cybersecurity standards for digital products and software throughout their lifecycle, from design to deployment. Covering a broad range of devices, from smartwatches to industrial systems, the CRA ensures consistent protections and certifies compliance, enhancing consumer trust. Together, these initiatives reflect a cohesive EU strategy to address evolving cyber threats and protect its digital ecosystem.
U.S.
Singapore
European Union
Source: World Economic Forum, NordPass
11
Made with FlippingBook - Share PDF online