The European Commission presented a new cybersecurity package combining updates to the Cybersecurity Act (CSA2) and NIS2 Directive, aiming to strengthen EU cyber resilience, harmonize rules, and address ICT supply chain risks. Major changes include: ​•​EU-wide cyber certification becomes a core compliance tool. ​•​Supply-chain security assessed and regulated at EU level. ​•​Standardized incident reporting and alignment with GDPR. ​•​Clearer scope for NIS2, including new actor