Cyber Regulatory Pressure Points: What CISOs Need on Their Radar

Cyber and technology regulation continues to evolve across major markets, with new requirements and supervisory expectations emerging across resilience, incident reporting, product security, AI, third-party risk and data.

In this session, I will highlight a selection of the regulatory developments and pressure points most relevant to CISOs and cyber GRC teams over the coming year. The focus will be on what is changing, where practical cyber implications are beginning to emerge, and which developments may warrant closer attention now.

Drawing on ISF’s regulatory analysis across jurisdictions, the session will cover major developments shaping the European regulatory landscape alongside a selection of high-impact changes elsewhere that multinational organisations should be watching.

Rather than providing an exhaustive regulatory update, the session is designed as a focused view of what matters most, where pressure is building and what cyber leaders should be watching next.

Key takeaways
· A focused view of the regulatory developments most likely to affect cyber and resilience priorities over the coming year.
· Practical implications emerging from major developments across cyber, resilience, product security, AI and third-party risk.
· Selected international developments that multinational organisations should have on their radar.
· Cross-cutting regulatory themes and pressure points that may warrant deeper review or preparation.