Current events in cybersecurity are intensifying, marked by the entry into force of the Dora European Regulation, a legislative framework designed to enhance the protection of financial institutions. At the same time, the acquisition of the start-up Secure-IC by an American tech giant opens new perspectives for securing embedded systems. The stakes of these events involve not only a strengthening of security infrastructures but also increased vigilance in the face of rising cyber threats. The dynamics of cybersecurity are evolving, thereby necessitating an adequate response from the stakeholders involved.
Dora European Regulation: A Revolution in Cybersecurity
January 17, 2025 marks the entry into force of the Dora European regulation, aimed at enhancing digital operational resilience within financial institutions. This regulatory framework imposes new strict obligations on banks, insurers, and other entities in response to IT risks, particularly those related to cyber attacks.
The affected entities must improve their management of IT risks by aligning with harmonized European standards. The requirements of the regulation are based on cybersecurity practices inspired by ISO 27001 and 27002 standards. The goal is to minimize systemic impacts and ensure the continuity of financial services in the face of growing threats.
Acquisition of Secure-IC: Strengthening Cybersecurity Capabilities
The American company Cadence recently announced the acquisition of the French start-up Secure-IC, which specializes in the cybersecurity of embedded systems. This successful transaction reflects the growing interest in the protection of connected objects and critical applications.
Secure-IC, which has distinguished itself with innovative solutions, is now part of Cadence’s portfolio. This tenth acquisition in less than five years demonstrates Cadence’s proactive strategy in security. The solutions from Secure-IC could play a major role in meeting the requirements of the DORA regulation.
Technical Initiatives: Cisco and Protection of AI Systems
Cisco has launched a new tool, AI Defense, aimed at protecting artificial intelligence systems from abuse and sophisticated cyber threats. This development comes at a time when companies must equip themselves with robust solutions to counter emerging threats related to AI.
Technological advancements make cybersecurity even more complex. By positioning itself in this niche, Cisco anticipates the growing needs of companies concerning data protection and resilience against cyber attacks.
Government Events: Changes within Cybersecurity Committees
A recent decision made by the American president has caused ripples in the field of cybersecurity. Donald Trump has dismissed several members of the government’s cybersecurity committee, including the CSRB, responsible for investigating cyber attacks conducted by state actors, notably China.
This decision raises concerns about the future of cybersecurity initiatives in the United States, especially as hacking incidents continue to escalate.
Merger of Devensys Cybersecurity with Inherent
Strategic movements are also observed in the French cybersecurity market. The pure player Devensys Cybersecurity, founded in Montpellier, has been acquired by the Lorraine group Inherent. This operation aims to strengthen presence and resources in the cybersecurity sector in France.
The CEO of Devensys will lead the cybersecurity activities of the Inherent group, demonstrating a willingness to integrate and optimize local expertise. Numerous hires are planned in the coming months to support this growth.
Future Perspectives and Challenges
Recent announcements indicate a rise in security initiatives in the digital sector. The DORA European regulation represents a major turning point for financial institutions facing a complex threat environment. Acquisitions, such as that of Secure-IC by Cadence, illustrate the importance of combining innovation and security.
Cisco, through its initiatives in AI, as well as changes in governance in the United States, highlight the current dynamics of the cybersecurity market. The landscape is reshaping, marking an era where resilience and data protection are more than ever at the heart of companies’ concerns.
Frequently Asked Questions about Cybersecurity and the European Regulation Dora
What is the European regulation Dora and why is it important for cybersecurity?
The Dora regulation, or Digital Operational Resilience Act, is a European regulation aimed at enhancing the operational resilience of financial entities in the face of IT threats. It establishes strict requirements for managing risks related to information and communication technologies, encouraging institutions to better prepare for cyber attacks.
Which entities are affected by the Dora regulation?
The Dora regulation primarily applies to financial institutions such as banks, insurance companies, and pension funds, as well as their service providers, including cloud service providers.
When did the Dora regulation come into force?
The Dora regulation came into force on January 17, 2025, and the affected entities must comply with new obligations within the established deadlines to ensure their digital resilience.
What are the main objectives of the Dora regulation?
The main objectives of the Dora regulation include strengthening resilience against cyber threats, improving IT risk management, and harmonizing security practices across Europe.
What are the implications of Cadence’s acquisition of Secure-IC in the field of cybersecurity?
Cadence’s acquisition of Secure-IC, a start-up specializing in cybersecurity for embedded systems, marks a turning point in the protection of connected objects and cybersecurity solutions within electronic systems, thereby enhancing innovation and security in this field.
How is Cisco contributing to cybersecurity with its new AI systems protection tool?
Cisco has launched a new tool called “AI Defense” aiming to protect businesses from sophisticated cyber threats and abuses related to artificial intelligence tools, thus helping secure critical infrastructures in the digital age.
What is the impact of the Dora regulation on new technologies used by financial institutions?
The Dora regulation forces financial institutions to adopt advanced technologies in cybersecurity, ensuring that ICT solutions are robust and capable of withstanding increasing cyber attacks.
What types of sanctions can be applied in the event of non-compliance with the Dora regulation?
Sanctions for non-compliance with the Dora regulation can include significant fines, operational restrictions, and a loss of trust from clients and business partners.
