CUSEC colleagues publish on EU cybersecurity research governance

🔍 New publication from our CUSEC colleagues! We are pleased to share that our team members Michal Rampášek and Matúš Mesarčík have published a new article titled “Rethinking Cybersecurity Research Governance: Lessons from the Act on Digital Services.” 💡 The paper explores the evolving EU regulatory landscape for cybersecurity research, particularly how researchers fit within frameworks like the Digital Services Act (DSA), Cyber Resilience Act (CRA), and NIS2 Directive. Despite progress, EU law still lacks a clear and coherent system that properly defines, safeguards, and empowers those engaging in cybersecurity research, especially outside traditional institutions. 📌 The authors highlight: - Legal ambiguity around the status of cybersecurity researchers - Challenges linked to vetting requirements and access to platform data under the DSA - Differences between systemic risk research and adversarial cybersecurity testing - The potential of more flexible tools, such as coordinated vulnerability disclosure and bug bounty schemes, especially under the CRA 🔐 Their conclusion? Effective cybersecurity research governance must reach beyond the DSA model, ensuring strong security and a safe environment for those who help uncover vulnerabilities. 🔗 https://lnkd.in/emgQytNp 👏 Congratulations to our colleagues on this important contribution to the discussion around responsible and future-proof cybersecurity policy! #CUSEC #cybersecurity #NIS2 #DSA #CRA