The revised Cybersecurity Act establishes an ICT supply chain security framework based on a risk-based approach. This framework will help the EU and Member States identify and mitigate risks across critical sectors while considering economic impacts and market supply.
The Act also introduces mandatory derisking of European mobile telecommunications networks from high-risk third-country suppliers, building on the existing 5G security toolbox.
Källa: EU tightens cybersecurity rules for tech supply chains – Help Net Security
