The Time Is Now to Prepare for CRA Enforcement

The Time Is Now to Prepare for CRA Enforcement

When the EU Cyber Resilience Act (CRA) was introduced into law in 2024, it represented one of the most significant regulatory shifts we've seen anywhere in the world with implications for how ...

What a Year of DORA Reveals About Cyber Resilience

It's now been a full calendar year since the European Union's Digital Operational Resilience Act (DORA) became enforceable in January 2025, marking a clear shift in how regulators expect organizations to manage ...

Building Resilience and DORA Compliance: Lessons, Gaps, What’s Next

Operational resilience is more than a nice-to-have. It's a business imperative. For financial institutions, this principle has been codified by the European Union's Digital Operational Resilience Act (DORA), which aims to ensure ...
2025 predictions: Regulations

2025 predictions: Regulations

As the world continues to grapple with increasing cybersecurity threats and the rapid evolution of technology, regulatory landscapes are shifting dramatically ...
Simplifying SBOM compliance with Sonatype under India's cybersecurity framework

Simplifying SBOM compliance with Sonatype under India’s cybersecurity framework

The Indian Securities and Exchange Board (SEBI) recently took a significant step to enhance software security by incorporating software bill of materials (SBOM) mandates under its Cybersecurity and Cyber Resilience Framework (CSCRF) ...
Sonatype CTO appointed to cyber resilience experts panel amidst growing financial compliance demands

Sonatype CTO appointed to cyber resilience experts panel amidst growing financial compliance demands

Sonatype's co-founder and Chief Technology Officer, Brian Fox, has been appointed to the newly formed Cyber and Technology Resilience Experts (CTREX) Panel, established by the Monetary Authority of Singapore (MAS) ...

Simplify NIS2 compliance with Sonatype

If you provide software or software services in the European Union (EU), you are no doubt aware of several key pieces of legislation being implemented to enhance cybersecurity for critical industries. The ...
Tackle Cyber Resilience Act requirements with our CRA checklist

Tackle Cyber Resilience Act requirements with our CRA checklist

Recent Cybersecurity regulations in the EU impact providers of digital products by setting down new requirements along the software supply chain. Our Cyber Resilience Act (CRA) checklist covers key elements of CRA ...