https://grcide.com/radar Changes to the instruments that land in scope: what moved, who it affects, and what it asks of a program. en Thu, 03 Sep 2026 00:00:00 +0000 https://grcide.com/radar#ai-act-high-risk-deferral https://grcide.com/radar#ai-act-high-risk-deferral Mon, 27 Jul 2026 00:00:00 +0000 The Digital Omnibus on AI moves the high-risk obligations to December 2027 and August 2028, and adds two prohibited practices from December 2026. https://grcide.com/radar#cer-directive-swedish-bill https://grcide.com/radar#cer-directive-swedish-bill Tue, 14 Jul 2026 00:00:00 +0000 Sweden's bill implementing the critical entities resilience directive was laid before the Riksdag on 14 July 2026, proposing effect from 1 January 2027. https://grcide.com/radar#cra-reporting-obligations https://grcide.com/radar#cra-reporting-obligations Thu, 11 Jun 2026 00:00:00 +0000 Article 14 applies from 11 September 2026, ahead of full application on 11 December 2027, and it reaches products already placed on the market. https://grcide.com/radar#nis2-swedish-cybersecurity-act https://grcide.com/radar#nis2-swedish-cybersecurity-act Thu, 15 Jan 2026 00:00:00 +0000 Cybersäkerhetslag (2025:1506) entered into force on 15 January 2026, fifteen months after the directive's transposition date of 17 October 2024. https://grcide.com/radar#gb-44495-44496-in-force https://grcide.com/radar#gb-44495-44496-in-force Thu, 01 Jan 2026 00:00:00 +0000 China's mandatory vehicle cybersecurity and software-update standards moved from issued to in force on 1 January 2026, seventeen months after publication. https://grcide.com/radar#iso-27001-2022-transition-closed https://grcide.com/radar#iso-27001-2022-transition-closed Fri, 31 Oct 2025 00:00:00 +0000 The accredited transition period set by IAF MD 26 ended on 31 October 2025; certificates naming the 2013 edition expire or are withdrawn. https://grcide.com/radar#iso-42006-certification-route https://grcide.com/radar#iso-42006-certification-route Mon, 07 Jul 2025 00:00:00 +0000 The requirements standard for bodies auditing AI management systems was published on 7 July 2025, alongside the impact-assessment standard of May 2025. https://grcide.com/radar#dora-subcontracting-rts https://grcide.com/radar#dora-subcontracting-rts Wed, 02 Jul 2025 00:00:00 +0000 Delegated Regulation (EU) 2025/532 sets what a financial entity must determine before ICT services supporting critical or important functions are subcontracted. https://grcide.com/radar#un-r155-supplement-3 https://grcide.com/radar#un-r155-supplement-3 Fri, 10 Jan 2025 00:00:00 +0000 The consolidated R155 text republished in the Official Journal as 2025/5 incorporates all valid text up to Supplement 3 to the original version. https://grcide.com/radar#nist-csf-2-0 https://grcide.com/radar#nist-csf-2-0 Mon, 26 Feb 2024 00:00:00 +0000 The Cybersecurity Framework 2.0 was published on 26 February 2024 as NIST CSWP 29, with Govern at the centre of a six-Function Core.