Pack analyst btn         PAC        
 
Report 20 Feb 2026

Europe Considers Banning High-Risk Cybersecurity Vendors in 2027 – InBrief Analysis

The Cybersecurity Act V2 (CSA V2), expected to be fully implemented by 2027, will fundamentally change how European organizations manage their ICT supply chains. For CISOs, this means mandatory vendor risk assessments must include ownership structure and country-of-origin analysis, not just technical security controls.

Starting in 2027, organizations classified as essential or important under NIS2 will be prohibited from using ICT components from designated high-risk suppliers in critical infrastructure. Mobile network operators have 36 months to replace affected equipment; other sectors will follow.

The immediate impact: procurement processes need updating, existing vendor relationships require auditing, and replacement roadmaps must be developed. Organizations with significant exposure to potentially affected suppliers (currently ~32% of 5G infrastructure in the EU) face substantial transition costs.

CISOs should act now: map your supply chain exposure, implement enhanced vendor due diligence incorporating non-technical risk factors, and align replacement cycles with the transition timeline. Early preparation minimizes disruption and positions your organization ahead of mandatory compliance deadlines.

Recommended advisory: PAC Leadership Session – Cybersecurity Compliance

profile-image
Eric Domage

SHARE :

Related Content

View all reports >

Oracle - Figures - US - FY 31-May-2024

This Excel document is part of the company profiles PAC publishes every year at local, regional and worldwide level;

Event Date : March 28, 2025

Read more >

Business Applications-Related Consulting & Systems Integration (C&SI) by Segments - Market Figures - Canada

This document provides market volumes, growth rates and forecasts for the Business Application Software (BAS)-related Consulting & Systems ...

Event Date : March 25, 2025

Read more >

OVHcloud - Figures - Worldwide

This Excel document is part of the company profiles PAC publishes every year at local, regional and worldwide level; it includes the following ...

Event Date : January 21, 2022

Read more >

Expert View: Quantum Computing and Post-Quantum Cryptography – Cybersecurity Challenges and Solutions

Quantum computing drives breakthroughs but is also associated with risks to cryptography. Algorithms like RSA and ECC could become vulnerable, ...

Event Date : October 21, 2025

Read more >

Expert View: Vendor Consolidation in the Cyber Security Market

Cost constraints, talent availability, and reactivity to threats are driving the need to consolidate companies’ cyber security. By focusing on ...

Event Date : March 30, 2023

Read more >

Latest Publications report

View latest publications Reports >

Free reports & webinars

View All Free Reports & Webinars >