Threats and industry trends analysis

This area will be used to track trends and emerging threats related to security.

Security Initiatives:

Regulation:

• US cybersecurity executive order: https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/

• EU Cyber Resilience Act: https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act

  • 12 March 2024 - the European Parliament approved the Cyber Resilience Act: https://www.europarl.europa.eu/doceo/document/TA-9-2024-0130_EN.html

Open Source Initiatives:

• OpenSSF: https://openssf.org/

  • Security Mobilization Plan:  https://openssf.org/oss-security-mobilization-plan/

• In response to the EU Cyber Resilience Act two working groups have been formed

  • Open Regulatory Compliance Working Group (Eclipse Foundation)

  • Global Cyber Policy Working Group (Linux Foundation)

2023 US Security Challenge:
https://www.whitehouse.gov/briefing-room/statements-releases/2023/08/09/biden-harris-administration-launches-artificial-intelligence-cyber-challenge-to-protect-americas-critical-software/