Cybersecurity, from NIS2 to the Cyber Resilience Act: Fortinet guides companies in compliance with the new regulatory landscape

Redazione RHC : 27 June 2025 19:10

By Aldo Di Mattia, Director of Specialized Systems Engineering and Cybersecurity Advisor Italy and Malta at Fortinet

After years of defining new regulatory strategies, the regulatory landscape, particularly in Europe, is moving from the introduction of broad cybersecurity frameworks to the much more complex phase of their implementation. This represents a crucial moment for public and private organizations across Europe, called upon to deal with regulatory compliance and the broader impact it entails on digital operations and strategies.

Transparency and collaboration are becoming essential elements of compliance. The new regulations introduced in Europe underline the importance of sharing information between vendors, partners, customers and public authorities, in order to improve the detection and response capabilities to threats. Furthermore, it becomes essential to strengthen cross-border cooperation between regulatory bodies. In this scenario, balancing the need for transparency with the protection of sensitive data remains a challenge to be carefully managed.

The impact of NIS2 and the Cyber Resilience Act

Starting in 2025, as the implementation of NIS2 and the Cyber Resilience Act (CRA) regulations takes shape, operational frameworks for secure information sharing will begin to emerge more clearly. In this scenario, public and private organizations must adopt compliance models that foster collaboration, while ensuring high standards of data protection.

With the growing need for NATO and national defense ministries to migrate systems to the cloud, the concept of “data sovereignty” is already taking center stage. This term encompasses a variety of needs: from defining data localization constraints to maintaining jurisdiction over one’s most critical and valuable information assets. In the coming years, regulators are also likely to provide clearer guidance and more harmonized cloud infrastructure standards.

Fortinet’s Role in Supporting Enterprise Compliance

At Fortinet, we are deeply committed to helping organizations navigate the complexities of the European regulatory landscape. Here’s how we’re making a difference:

• Collaboration with institutions: We will continue to work closely with European authorities, sharing expertise and best practices on how regulations impact business, and promoting concrete, effective and applicable solutions.
• Support for customers and partners: We are at the side of organizations to guide them in this evolving regulatory environment, ensuring efficient and integrated compliance strategies. Our tailored solutions and industry expertise simplify regulatory compliance and enhance security.
• Training and Skills Development: Through initiatives such as our commitment to the European Commission’s Cybersecurity Skills Academy, we address the skills gap with robust training programs. Our Fortinet Training Institute also offers accessible courses and certifications. Upskilling is not just about filling immediate skills gaps, it’s about building a workforce that is prepared to address an increasingly complex threat landscape.
• Leadership in data protection: Our certification under the US-EU Data Privacy Framework, along with the appointment of dedicated Data Protection Officers, demonstrates our commitment to meeting the highest standards of personal data protection.

2025 is a pivotal year for cybersecurity in Europe. As new regulations come into force and organizations begin to implement them, the focus will shift from mere formal compliance to a more collaborative, strategic and integrated approach. Fortinet, in this context, will always be at the forefront in supporting compliance and secure innovation of companies, in all sectors.

Redazione
The editorial team of Red Hot Cyber consists of a group of individuals and anonymous sources who actively collaborate to provide early information and news on cybersecurity and computing in general.

Lista degli articoli