3 ms·
EU lawmakers kick off cybersecurity law negotiations for connected devices
- jruohonen 3y agoSo open source is still a question mark: "The preamble’s text, which covers essential aspects of the proposal, such as how to deal with open software, was not included in the first batch of compromises as EURACTIV understands the rapporteur still has not decided on the issue." Also less transparency for vulnerability disclosure: "The draft law mandates manufacturers to inform ENISA, the EU cybersecurity agency, about cybersecurity incidents and actively exploited vulnerabilities. The latter is more sensitive information, so the treatment has been limited to a need-to-know basis." "In addition, a paragraph that would give ENISA or national Computer Emergency Response Teams (CSIRTs) the capacity to disclose a significant incident in the public interest has been added." These also posit a hypothesis about whether ENISA might be up to the stockpiling game.