# NIS2

Published articles for NIS2.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Rail Network Modernization: FRMCS, Sovereignty and the AI Edge

DevFeed: [Rail Network Modernization: FRMCS, Sovereignty and the AI Edge](<https://devfeed.tech/articles/rail-network-modernization-frmcs-sovereignty-and-the-ai-edge-26717.md>)

Original publisher: [Read original article](<https://blogs.cisco.com/industries/rail-network-modernization-frmcs-sovereignty-and-the-ai-edge>)

Author: Steve Payne

Published: 2026-09-15T13:31:46Z

Content type: article

Language: en

Sources: [Cisco Blogs](<https://devfeed.tech/sources/cisco-blogs.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Critical Infrastructure](<https://devfeed.tech/topics/critical-infrastructure.md>), [digital sovereignty](<https://devfeed.tech/topics/digital-sovereignty.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [Availability](<https://devfeed.tech/topics/availability.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [availability](<https://devfeed.tech/tags/availability.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [cisco-industrial-iot-iiot](<https://devfeed.tech/tags/cisco-industrial-iot-iiot.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [digital-sovereignty](<https://devfeed.tech/tags/digital-sovereignty.md>), [end-of-life](<https://devfeed.tech/tags/end-of-life.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [industries](<https://devfeed.tech/tags/industries.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [internet-of-things-iot](<https://devfeed.tech/tags/internet-of-things-iot.md>), [latency](<https://devfeed.tech/tags/latency.md>), [modernization](<https://devfeed.tech/tags/modernization.md>), [network](<https://devfeed.tech/tags/network.md>), [networks](<https://devfeed.tech/tags/networks.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [systems](<https://devfeed.tech/tags/systems.md>), [transportation](<https://devfeed.tech/tags/transportation.md>), [unified-edge](<https://devfeed.tech/tags/unified-edge.md>)

### AI overview

Cisco's pre-InnoTrans 2026 perspective examines the modernization of European rail communications from GSM-R to FRMCS. It argues that the transition requires changes to the underlying IP network, including high availability, deterministic latency, cybersecurity, and large-scale automation, while operators address resilience, digital sovereignty, investment, and regulatory requirements.

### Source excerpt

Join Cisco at InnoTrans 2026 to explore the next generation of rail networks. Discover how FRMCS, AI edge computing, and digital sovereignty are transforming critical infrastructure into secure, automated systems.

## GitLab Dedicated: Compliance for a new regulatory era

DevFeed: [GitLab Dedicated: Compliance for a new regulatory era](<https://devfeed.tech/articles/gitlab-dedicated-compliance-for-a-new-regulatory-era-20785.md>)

Original publisher: [Read original article](<https://about.gitlab.com/blog/gitlab-dedicated-compliance/>)

Author: Aathira Nair

Published: 2026-09-14T00:00:00Z

Content type: article

Language: en

Sources: [GitLab](<https://devfeed.tech/sources/gitlab.md>)

Topics: [GitLab](<https://devfeed.tech/topics/gitlab.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Security](<https://devfeed.tech/topics/security.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Multitenancy](<https://devfeed.tech/topics/multitenancy.md>)

Tags: [amazon-web-services-aws](<https://devfeed.tech/tags/amazon-web-services-aws.md>), [aws](<https://devfeed.tech/tags/aws.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [gdpr](<https://devfeed.tech/tags/gdpr.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [product](<https://devfeed.tech/tags/product.md>), [regulatory](<https://devfeed.tech/tags/regulatory.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [saas](<https://devfeed.tech/tags/saas.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article presents GitLab Dedicated as a fully isolated, single-tenant SaaS platform hosted and managed by GitLab in a preferred Amazon Web Services region. It explains how the service is intended to help European enterprises address compliance, data sovereignty, audit readiness, security, resilience, and operational responsibilities related to DORA, NIS2, and GDPR.

### Source excerpt

Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessing cybersecurity maturity across critical sectors. The agency is moving from guidance and consultation into active oversight, scrutiny, and accountability. This is the regulatory environment European enterprises now operate in. Multi-tenant cloud platforms remove operational overhead but place source code and pipelines on shared infrastructure regulators now scrutinize. Self-managed solutions provide isolation but transfer responsibility for upgrade cycles, security patches, and disaster recovery (DR) tests to an already stretched platform team. Both deployment options leave gaps in risk management, data sovereignty, and furnishing audit evidence. In this article, you'll discover how GitLab Dedicated, a fully isolated, single-tenant SaaS solution deployed in your preferred Amazon Web Services (AWS) region and hosted and managed by GitLab, addresses these challenges and helps you keep pace with evolving compliance requirements. "NatWest Group is adopting GitLab Dedicated SaaS to enable our engineers to use a common cloud engineering platform; delivering new customer and colleague outcomes rapidly, frequently, and securely with high quality, automated testing, on-demand infrastructure, and straight-through deployment." -- Adam Leggett, Platform Lead for Engineering Platforms, NatWest Group Regulations are driving change In the European Union, key regulations are driving the need for a different platform approach. These regulations converge on a decision most enterprises made before they existed: a platform their developers build on. That decision now carries audit consequences it didn't before. Digital Operational Resilience Act (DORA), which came into force across EU financial services in January 2025, requires financial institutions to keep critical technology resilient,

## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security](<https://devfeed.tech/articles/chainguard-is-named-a-leader-in-the-2026-gartner-magic-quadranttm-for-software-supply-chain-security-12961.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-is-named-a-leader-in-the-2026-gartner-magic-quadrant-for-software-supply-chain-security>)

Published: 2026-06-18T00:00:00Z

Content type: news

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-gartner](<https://devfeed.tech/tags/chainguard-gartner.md>), [chainguard-gartner-magic-quadrant](<https://devfeed.tech/tags/chainguard-gartner-magic-quadrant.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [gartner](<https://devfeed.tech/tags/gartner.md>), [gartner-mq-software-supply-chain](<https://devfeed.tech/tags/gartner-mq-software-supply-chain.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [security](<https://devfeed.tech/tags/security.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [software-supply-chain-security-gartner](<https://devfeed.tech/tags/software-supply-chain-security-gartner.md>)

### AI overview

Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements.

### Source excerpt

Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation.

## Audit trails are a feature, not a compliance tax

DevFeed: [Audit trails are a feature, not a compliance tax](<https://devfeed.tech/articles/audit-trails-are-a-feature-not-a-compliance-tax-9179.md>)

Original publisher: [Read original article](<https://webflowmarketingmain.com/blog/audit-trails-not-a-compliance-tax>)

Author: Mohit Bansal

Published: 2026-06-04T00:00:00Z

Content type: article

Language: en

Sources: [Webflow Blog](<https://devfeed.tech/sources/webflow-blog.md>)

Topics: [Logging](<https://devfeed.tech/topics/logging.md>), [log management](<https://devfeed.tech/topics/log-management.md>), [SIEM, Security](<https://devfeed.tech/topics/siem-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [compliance](<https://devfeed.tech/tags/compliance.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [logging](<https://devfeed.tech/tags/logging.md>), [logs](<https://devfeed.tech/tags/logs.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [security](<https://devfeed.tech/tags/security.md>), [siem](<https://devfeed.tech/tags/siem.md>), [soc-2](<https://devfeed.tech/tags/soc-2.md>)

### AI overview

The article argues that audit logging has evolved from an overlooked compliance requirement into a product capability. Queryable, timestamped logs can support sales, vendor evaluations, accountability for AI agents, and more complete breach reconstruction.

### Source excerpt

Logging used to satisfy auditors. Now it closes deals, holds AI agents accountable, and decides whether you can reconstruct a breach.

## NIS2: Understanding key software security requirements

DevFeed: [NIS2: Understanding key software security requirements](<https://devfeed.tech/articles/nis2-understanding-key-software-security-requirements-13185.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/nis2-understanding-key-software-security-requirements>)

Published: 2025-02-25T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Critical Infrastructure](<https://devfeed.tech/topics/critical-infrastructure.md>), [Development](<https://devfeed.tech/topics/development.md>)

Tags: [compliance](<https://devfeed.tech/tags/compliance.md>), [cve-management](<https://devfeed.tech/tags/cve-management.md>), [cve-reporting](<https://devfeed.tech/tags/cve-reporting.md>), [energy](<https://devfeed.tech/tags/energy.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [manufacturing](<https://devfeed.tech/tags/manufacturing.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [risk-management](<https://devfeed.tech/tags/risk-management.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [transportation](<https://devfeed.tech/tags/transportation.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

This article explains how the European Union's NIS2 directive expands software security and vulnerability management requirements, shifts accountability to management and boards, and affects organizations operating in the EU. It discusses software supply chain security, open source development, SBOMs, CVE reporting, risk management, and the workload these requirements may create for security and developer teams.

### Source excerpt

The European Union's Network and Information Systems 2 is a compliance framework with strict requirements around vulnerability management.

## NIS2 Compliance After the October Deadline: Penalties and Ongoing Security Obligations

DevFeed: [NIS2 Compliance After the October Deadline: Penalties and Ongoing Security Obligations](<https://devfeed.tech/articles/the-nis2-directive-is-here-what-happens-next-29770.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/nis2-compliance-deadline-what-businesses-need-to-know/>)

Author: info@goteleport.com (Jack Pitts)

Published: 2024-10-22T00:00:00Z

Content type: opinion

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Critical Infrastructure](<https://devfeed.tech/topics/critical-infrastructure.md>)

Tags: [compliance](<https://devfeed.tech/tags/compliance.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This commentary examines the state of NIS2 compliance after the October deadline, noting that many European businesses may still lack the required controls and that many EU member states have not codified the standards nationally. It outlines potential penalties and urges organizations to continue addressing their security obligations.

### Source excerpt

About 66% of European businesses remain non-compliant with NIS2, facing fines up to EUR 10M. Teleport's identity-based access helps achieve compliance.

## EU NIS2 Directive Excludes Internet Root Servers After Institutional Engagement

DevFeed: [EU NIS2 Directive Excludes Internet Root Servers After Institutional Engagement](<https://devfeed.tech/articles/dear-eu-please-don-t-ruin-the-root-36367.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/dont-ruin-the-root/>)

Author: About the author

Published: 2021-05-10T06:43:53Z

Content type: opinion

Language: en

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [Internet](<https://devfeed.tech/topics/internet.md>), [servers](<https://devfeed.tech/topics/servers.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [dns](<https://devfeed.tech/tags/dns.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [internet](<https://devfeed.tech/tags/internet.md>), [legal](<https://devfeed.tech/tags/legal.md>), [nis2](<https://devfeed.tech/tags/nis2.md>), [servers](<https://devfeed.tech/tags/servers.md>)

### AI overview

This commentary discusses concern that the EU's proposed NIS2 cybersecurity directive would classify Internet root servers as essential entities. It reports that the root servers were later excluded from the directive's scope after engagement with European institutions.

### Source excerpt

I love Europe, and I want to see the European Union succeed. I also love the Internet, and I want to see it thrive as well. And it therefore pains me that it now appears that the European Union might inadvertently be picking an ugly fight with "The Internet". UPDATE: I am EXCEPTIONALLY happy to report that through robust engagement with European institutions who understood the problem, the root servers are now fully out of scope of the NIS2 directive!