Simplify NIS2 compliance with Sonatype
If you provide software or software services in the European Union (EU), you are no doubt aware of several key pieces of legislation being implemented to enhance cybersecurity for critical industries. The Network and Information Systems Directive 2 (NIS2) is one of the emerging regulations you need to understand ... Read More

Tackle Cyber Resilience Act requirements with our CRA checklist
Recent Cybersecurity regulations in the EU impact providers of digital products by setting down new requirements along the software supply chain. Our Cyber Resilience Act (CRA) checklist covers key elements of CRA and how the Sonatype platform enables compliance for your organization ... Read More

Sonatype can help you navigate DORA compliance
Providers of digital products and services to the EU are being impacted by a suite of new cybersecurity regulations coming into force. Among them is the Digital Operations Resilience Act (DORA), and we've developed a checklist to help you manage key components on your journey to compliance ... Read More

Compliance webinar series: Understanding the Cyber Resilience Act
If your organization is not already preparing to comply with the Cyber Resilience Act (CRA), now's the time to begin. This is a European-wide regulation, which means it will be implemented in the same way across all European Union (EU) member states. However, its practical application will impact anyone placing ... Read More

Vulnerability handling requirements for NIS2 compliance
In a previous blog post, we covered two foundational elements of the Network and Information Security (NIS2) Directive, software supply chain security and reporting requirements. In this blog, we take a closer look at the types of organizations impacted by NIS2 and the incident-handling requirements it outlines ... Read More

Summer compliance webinar series: Understanding DORA compliance
In the third part of our Summer of Software Regulations & Compliance webinar series, the Digital Operations Resilience Act (DORA) took center stage with Ilkka Turunen, Field CTO at Sonatype joining Friso Schutte, the CTO of fintech leader SurePay for a discussion on what financial service providers can do to ... Read More

The countdown to NIS2 is on: Understand its scope and requirements
The Network and Information Systems Directive 2 (NIS2) regulation goes into effect in October 2024, leaving European Union (EU) member states just a few fleeting months to adopt and publish its compliance recommendations ... Read More

Sonatype’s summer webinar series: Future cybersecurity requirements
Sonatype kicked off its Summer of Software Regulations & Compliance webinar series this week with a broad look at some of the key regulations on improving cybersecurity. Jen Ellis, one of the hosts of the Distilling Cyber Policy podcast, moderated a discussion with Alex Botting, her co-host and EU Engagement ... Read More