A Risk-Based Approach to Sectoral Cybersecurity: Introducing EN 18037:2025
In an increasingly digital world, ensuring consistent and robust cybersecurity across complex, multi-stakeholder systems is more critical than ever. The new European Standard EN 18037:2025 ‘Guidelines on a sectoral cybersecurity assessment’, developed by JTC 13 ‘Cybersecurity and Data Protection’, fills this gap by specifying an approach for the risk-based identification of cybersecurity, certification, and assurance requirements for ICT products, processes, and services within complex, multi-stakeholder sectoral systems.