Simplify NIS2 compliance with Sonatype

If you provide software or software services in the European Union (EU), you are no doubt aware of several key pieces of legislation being implemented to enhance cybersecurity for critical industries. The Network and Information Systems Directive 2 (NIS2) is one of the emerging regulations you need to understand ... Read More
Tackle Cyber Resilience Act requirements with our CRA checklist

Tackle Cyber Resilience Act requirements with our CRA checklist

Recent Cybersecurity regulations in the EU impact providers of digital products by setting down new requirements along the software supply chain. Our Cyber Resilience Act (CRA) checklist covers key elements of CRA and how the Sonatype platform enables compliance for your organization ... Read More
Sonatype can help you navigate DORA compliance

Sonatype can help you navigate DORA compliance

Providers of digital products and services to the EU are being impacted by a suite of new cybersecurity regulations coming into force. Among them is the Digital Operations Resilience Act (DORA), and we've developed a checklist to help you manage key components on your journey to compliance ... Read More
Compliance webinar series: Understanding the Cyber Resilience Act

Compliance webinar series: Understanding the Cyber Resilience Act

If your organization is not already preparing to comply with the Cyber Resilience Act (CRA), now's the time to begin. This is a European-wide regulation, which means it will be implemented in the same way across all European Union (EU) member states. However, its practical application will impact anyone placing ... Read More
Vulnerability handling requirements for NIS2 compliance

Vulnerability handling requirements for NIS2 compliance

|
In a previous blog post, we covered two foundational elements of the Network and Information Security (NIS2) Directive, software supply chain security and reporting requirements. In this blog, we take a closer look at the types of organizations impacted by NIS2 and the incident-handling requirements it outlines ... Read More
Summer compliance webinar series: Understanding DORA compliance

Summer compliance webinar series: Understanding DORA compliance

In the third part of our Summer of Software Regulations & Compliance webinar series, the Digital Operations Resilience Act (DORA) took center stage with Ilkka Turunen, Field CTO at Sonatype joining Friso Schutte, the CTO of fintech leader SurePay for a discussion on what financial service providers can do to ... Read More
The countdown to NIS2 is on: Understand its scope and requirements

The countdown to NIS2 is on: Understand its scope and requirements

The Network and Information Systems Directive 2 (NIS2) regulation goes into effect in October 2024, leaving European Union (EU) member states just a few fleeting months to adopt and publish its compliance recommendations ... Read More
Sonatype's summer webinar series: Future cybersecurity requirements

Sonatype’s summer webinar series: Future cybersecurity requirements

Sonatype kicked off its Summer of Software Regulations & Compliance webinar series this week with a broad look at some of the key regulations on improving cybersecurity. Jen Ellis, one of the hosts of the Distilling Cyber Policy podcast, moderated a discussion with Alex Botting, her co-host and EU Engagement ... Read More