The Cybersecurity Act V2 (CSA V2), expected to be fully implemented by 2027, will fundamentally change how European organizations manage their ICT supply chains. For CISOs, this means mandatory vendor risk assessments must include ownership structure and country-of-origin analysis, not just technical security controls.
Starting in 2027, organizations classified as essential or important under NIS2 will be prohibited from using ICT components from designated high-risk suppliers in critical infrastructure. Mobile network operators have 36 months to replace affected equipment; other sectors will follow.
The immediate impact: procurement processes need updating, existing vendor relationships require auditing, and replacement roadmaps must be developed. Organizations with significant exposure to potentially affected suppliers (currently ~32% of 5G infrastructure in the EU) face substantial transition costs.
CISOs should act now: map your supply chain exposure, implement enhanced vendor due diligence incorporating non-technical risk factors, and align replacement cycles with the transition timeline. Early preparation minimizes disruption and positions your organization ahead of mandatory compliance deadlines.
Recommended advisory: PAC Leadership Session – Cybersecurity Compliance
SHARE :
E-commerce has grown tremendously in recent years, changing how we purchase and conduct business. New types of e-commerce are emerging as omnichannel ...
Event Date : March 30, 2023
This Excel document is part of the company profiles PAC publishes every year at local, regional and worldwide level.
Event Date : April 30, 2025
This Excel document is part of the company profiles PAC publishes every year at local, regional and worldwide level.
Event Date : October 24, 2025
Automated valet parking (AVP) technology allows to maneuver vehicles automatically through specific areas, such as a parking garage. PAC noticed that ...
Event Date : March 25, 2024
Microsoft UK is the largest software and cloud platform supplier in the UK, supporting digital transformation with AI, cloud and workplace solutions. ...
Event Date : June 03, 2026
Public Sector - Market View - Netherlands
Market Reports October 22, 2026 NEW 
T-Systems - Figures - Netherlands - FY 31-Dec-2025
Datamart October 21, 2026 NEW
T-Systems - Vendor View - Netherlands
Vendor Profile October 21, 2026 NEW
Atos - Figures - Belgium - FY 31-Dec-2025
Datamart October 20, 2026 NEW
Vendor Profile October 20, 2026 NEW
Atos: Cause for Optimism, Despite the Headlines
Blog Post February 05, 2024
Re-Imagine Enterprise-Scale Cyber Defence Through Agentic AI Platforms
Whitepaper & Trend Studies October 20, 2026
Key Takeaways from Hitachi Hour Krakow
Blog Post October 06, 2026
AI Drives CONTACT Software’s Industrial Expansion
Blog Post September 28, 2026
Sovereign Cortex in Germany: Beyond Data Residency
Blog Post September 25, 2026
Cloud X Summit by STACKIT: "We have come to stay"
Blog Post September 23, 2026
