Airport Industry News
Tiana May
21 October 2026
The European Union’s Cyber Resilience Act (CRA) and NIS2 Directive establish cybersecurity requirements for digital products and organisations operating across critical sectors, including aviation.
The CRA’s vulnerability and incident-reporting obligations began on 11 September 2026, ahead of the regulation’s wider application date of 11 December 2027. Meanwhile, in member states that have transposed it, the NIS2 Directive already requires covered organisations to manage cybersecurity risks and report significant incidents under the relevant national legislation...
