Liability Regulation
The Time Is Now to Prepare for CRA Enforcement
When the EU Cyber Resilience Act (CRA) was introduced into law in 2024, it represented one of the most significant regulatory shifts we've seen anywhere in the world with implications for how ...
What a Year of DORA Reveals About Cyber Resilience
It's now been a full calendar year since the European Union's Digital Operational Resilience Act (DORA) became enforceable in January 2025, marking a clear shift in how regulators expect organizations to manage ...
CRA and AI Regulation: What’s Next for Software Compliance?
The days of postponing cyber regulations are over ...
Building Resilience and DORA Compliance: Lessons, Gaps, What’s Next
Operational resilience is more than a nice-to-have. It's a business imperative. For financial institutions, this principle has been codified by the European Union's Digital Operational Resilience Act (DORA), which aims to ensure ...
2025 predictions: Regulations
As the world continues to grapple with increasing cybersecurity threats and the rapid evolution of technology, regulatory landscapes are shifting dramatically ...
Simplifying SBOM compliance with Sonatype under India’s cybersecurity framework
The Indian Securities and Exchange Board (SEBI) recently took a significant step to enhance software security by incorporating software bill of materials (SBOM) mandates under its Cybersecurity and Cyber Resilience Framework (CSCRF) ...
Sonatype CTO appointed to cyber resilience experts panel amidst growing financial compliance demands
Sonatype's co-founder and Chief Technology Officer, Brian Fox, has been appointed to the newly formed Cyber and Technology Resilience Experts (CTREX) Panel, established by the Monetary Authority of Singapore (MAS) ...
Simplify NIS2 compliance with Sonatype
If you provide software or software services in the European Union (EU), you are no doubt aware of several key pieces of legislation being implemented to enhance cybersecurity for critical industries. The ...
Tackle Cyber Resilience Act requirements with our CRA checklist
Recent Cybersecurity regulations in the EU impact providers of digital products by setting down new requirements along the software supply chain. Our Cyber Resilience Act (CRA) checklist covers key elements of CRA ...

