pc
nid 95803
no date
arahman@vixio.com
European Union
European Union Agency for Cybersecurity
horizon scanning
80% of draft length
draft in Generated
Generated
1496 charsEuropean Union Agency for Cybersecurity Publishes Technical Advisory on Software Bill of Materials Adoption
On October 22, 2026, the European Union Agency for Cybersecurity (ENISA) published a technical advisory on the adoption of Software Bill of Materials (SBOM). The advisory provides practical guidance for organisations seeking to establish initial SBOM capabilities and enhance transparency across their software supply chains.
The document is aimed particularly at micro, small and medium-sized enterprises (SMEs) and stewards. It aligns with the security principles set out in ENISA's Secure by Design and Default Playbook. The advisory outlines an SBOM implementation architecture and data flows based on a defined lifecycle. It also presents an indicative SBOM threat model, identifying targeted risks, and lists measures to address security issues across the SBOM ecosystem.
The publication supports organisations preparing for the EU Cyber Resilience Act (CRA). ENISA launched a survey at the end of 2025 to gather factual data on how organisations are approaching SBOM adoption in response to the CRA, and ENISA has also published an SME Cyber Resilience Maturity Assessment Model and a survey report on SME CRA preparedness.
Organisations, particularly SMEs, should review the advisory to assess their current SBOM capabilities and identify the measures needed to strengthen software supply chain security. The publication is available in English on the ENISA website.
References:
- ENISA, Technical Advisory for Software Bill of Materials, October 22, 2026: https://www.enisa.europa.eu
Agent draft
Not run yet.
Published
1196 charsNorway's Central Bank Launches Consultation on NBO Operating Schedule and Incident Management Under T+1
On October 20, 2026, the Central Bank of Norway (Norges Bank) issued a consultation letter to banks, financial institutions, banking industry organisations and other stakeholders on an operating schedule for its settlement system (NBO) adapted to a shorter settlement cycle, together with changes to the framework for incident management.
The changes follow EU amendments to the Central Securities Depositories Regulation (CSDR) introducing a shorter settlement cycle, known as T+1. Norges Bank proposes an NBO operating schedule aligned with T+1, alongside revised incident management arrangements. Its new standard closing time of 18:00 has already been decided and is not subject to consultation. Stakeholders are invited to comment on the proposed operating schedule and incident management framework. Input will inform Norges Bank's final assessment of both under T+1. Norges Bank expects to publish the final NBO operating schedule in December 2026.
The consultation closes on November 27, 2026, and responses should be sent to post@norges-bank.no with the subject line "Consultation - new operating schedule and incident management." Responses will be published on Norges Bank's website.