Pack analyst btn         PAC        
 
Report 20 Feb 2026

Europe Considers Banning High-Risk Cybersecurity Vendors in 2027 – InBrief Analysis

The Cybersecurity Act V2 (CSA V2), expected to be fully implemented by 2027, will fundamentally change how European organizations manage their ICT supply chains. For CISOs, this means mandatory vendor risk assessments must include ownership structure and country-of-origin analysis, not just technical security controls.

Starting in 2027, organizations classified as essential or important under NIS2 will be prohibited from using ICT components from designated high-risk suppliers in critical infrastructure. Mobile network operators have 36 months to replace affected equipment; other sectors will follow.

The immediate impact: procurement processes need updating, existing vendor relationships require auditing, and replacement roadmaps must be developed. Organizations with significant exposure to potentially affected suppliers (currently ~32% of 5G infrastructure in the EU) face substantial transition costs.

CISOs should act now: map your supply chain exposure, implement enhanced vendor due diligence incorporating non-technical risk factors, and align replacement cycles with the transition timeline. Early preparation minimizes disruption and positions your organization ahead of mandatory compliance deadlines.

Recommended advisory: PAC Leadership Session – Cybersecurity Compliance

profile-image
Eric Domage

SHARE :

Related Content

View all reports >

AI (Artificial Intelligence) - Vendor Rankings - Worldwide

This Excel document positions and ranks the leading AI (Artificial Intelligence)  IT Services providers Worldwide.

Event Date : November 01, 2024

Read more >

Sustainability-related IT Consulting & Services in Europe – Sustainability of IT - PAC RADAR (internal use) - 2024

PAC has analyzed the IT services provider landscape in Europe and evaluated the leading providers’ approaches, offerings, strategies, and ...

Event Date : January 23, 2024

Read more >

Vertical Sectors - Market Figures - Australia

This Excel document delivers market figures broken down by vertical sectors. Figures cover a seven-year time frame (results from the past two years ...

Event Date : January 21, 2026

Read more >

Public Sector - InSight Analysis - UK

The UK public sector is entering a new transformation cycle under the Labour Government, prioritising data-centric modernization across health, ...

Event Date : January 28, 2026

Read more >

Vertical Sectors - Market Figures - Eastern Europe Consolidation

This Excel document delivers market figures broken down by vertical sectors. Figures cover a seven-year time frame (results from the past two years ...

Event Date : January 28, 2026

Read more >

Latest Publications report

View latest publications Reports >

Free reports & webinars

View All Free Reports & Webinars >