https://otgovernanceradar.com Bot-updated tracker and weekly briefing on OT/ICS security regulations and standards — NIS2, the Cyber Resilience Act, IEC 62443, NERC CIP, TSA directives, UK NIS and more — for OT GRC leads, CISOs and consultants. https://otgovernanceradar.com/regulations/uk-nis-and-cyber-security-resilience-bill/ 2026-10-26-uk-nis-and-cyber-security-resilience-bill-1 Mon, 26 Oct 2026 00:00:00 GMT Peers agreed amendments requiring a review of the NIS regime within 12 months and a register of state actors; a frontier-AI incident reporting amendment was defeated. Third reading 2 Nov 2026. Source: https://www.parliament.uk/business/news/2026/october-2026/cyber-security-and-resilience-network-and-information-systems-bill-undergoes-further-scrutiny-in-the-lords/ https://otgovernanceradar.com/regulations/nis2/ 2026-10-03-nis2-2 Sat, 03 Oct 2026 00:00:00 GMT Poland NIS2 update — see the country obligations page. Source: https://www.gov.pl/web/baza-wiedzy/ostatnie-dni-na-samorejestracje-w-wykazie-ksc-termin-mija-3-pazdziernika https://otgovernanceradar.com/regulations/nis2/ 2026-10-01-nis2-3 Thu, 01 Oct 2026 00:00:00 GMT Austria NIS2 update — see the country obligations page. Source: https://www.bundesamt-cybersicherheit.gv.at/faq/registrierung.html https://otgovernanceradar.com/regulations/circia/ 2026-10-01-circia-4 Thu, 01 Oct 2026 00:00:00 GMT Reported submission of the final rule for OMB review; no publication date yet. Verify against reginfo.gov. Source: https://www.insideprivacy.com/critical-infrastructure/cisa-submits-final-circia-rule-for-omb-review/ https://otgovernanceradar.com/regulations/cyber-resilience-act/ 2026-09-11-cyber-resilience-act-5 Fri, 11 Sep 2026 00:00:00 GMT Manufacturers must report actively exploited vulnerabilities and severe incidents through ENISA's Single Reporting Platform. Source: https://www.enisa.europa.eu/news/the-cra-single-reporting-platform-is-launched https://otgovernanceradar.com/regulations/nis2/ 2026-09-10-nis2-6 Thu, 10 Sep 2026 00:00:00 GMT ECSO counts primary laws; France, Ireland and Spain still listed as draft law. Source: https://ecs-org.eu/nis2-tracker/ https://otgovernanceradar.com/regulations/nis2/ 2026-08-15-nis2-7 Sat, 15 Aug 2026 00:00:00 GMT Netherlands NIS2 update — see the country obligations page. Source: https://www.ncsc.nl/cyberbeveiligingswet-nis2/registreren https://otgovernanceradar.com/regulations/nerc-cip/ 2026-08-10-nerc-cip-8 Mon, 10 Aug 2026 00:00:00 GMT Extends INSM requirements; effective 1 Oct 2029 per NERC. Source: https://www.nerc.com/standards/reliability-standards/cip/cip-015-2 https://otgovernanceradar.com/regulations/nis2/ 2026-07-08-nis2-9 Wed, 08 Jul 2026 00:00:00 GMT Ireland, Spain, France and the Netherlands referred for failing to notify transposition; Commission requests lump sum and daily penalties. Source: https://digital-strategy.ec.europa.eu/en/news/commission-refers-ireland-spain-france-and-netherlands-court-justice-failing-transpose-rules https://otgovernanceradar.com/regulations/nis2/ 2026-07-01-nis2-10 Wed, 01 Jul 2026 00:00:00 GMT Sweden NIS2 update — see the country obligations page. Source: https://www.ncsc.se/sv/radgivning-och-stod/cybersakerhetslagen-nis2/att-anmala-en-verksamhet/ https://otgovernanceradar.com/regulations/tsa-pipeline-rail-security-directives/ 2026-05-01-tsa-pipeline-rail-security-directives-11 Fri, 01 May 2026 00:00:00 GMT New series letters (02G, 01E) effective 3 May 2026 through 2 May 2027. Source: https://www.tsa.gov/sd-and-ea https://otgovernanceradar.com/regulations/nis2/ 2026-04-16-nis2-12 Thu, 16 Apr 2026 00:00:00 GMT Belgium NIS2 update — see the country obligations page. Source: https://atwork.safeonweb.be/news/nis2-18-april-2026-deadline-what-essential-entities-must-have-place https://otgovernanceradar.com/regulations/nis2/ 2026-04-03-nis2-13 Fri, 03 Apr 2026 00:00:00 GMT Poland NIS2 update — see the country obligations page. Source: https://www.gov.pl/web/baza-wiedzy/ostatnie-dni-na-samorejestracje-w-wykazie-ksc-termin-mija-3-pazdziernika https://otgovernanceradar.com/regulations/nerc-cip/ 2026-04-01-nerc-cip-14 Wed, 01 Apr 2026 00:00:00 GMT Low-impact entities must have methods to determine and disable vendor remote access. Source: https://www.ferc.gov/news-events/news/chairmans-reliability-report-year-review https://otgovernanceradar.com/regulations/nis2/ 2026-01-20-nis2-15 Tue, 20 Jan 2026 00:00:00 GMT Proposal COM(2026) 13: simplification, alignment with Cybersecurity Act 2, scope/definition clarifications, small mid-cap category, streamlined ransomware reporting. Subject to Parliament/Council negotiation. Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52026PC0013 https://otgovernanceradar.com/regulations/nis2/ 2026-01-15-nis2-16 Thu, 15 Jan 2026 00:00:00 GMT Italy NIS2 update — see the country obligations page. Source: https://www.acn.gov.it/portale/faq/nis/misure-notifiche-base https://otgovernanceradar.com/regulations/nis2/ 2026-01-06-nis2-17 Tue, 06 Jan 2026 00:00:00 GMT Germany NIS2 update — see the country obligations page. Source: https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2025/251205_NIS-2-Umsetzungsgesetz_in_Kraft.html https://otgovernanceradar.com/regulations/nis2/ 2025-12-06-nis2-18 Sat, 06 Dec 2025 00:00:00 GMT Germany NIS2 update — see the country obligations page. Source: https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2025/251205_NIS-2-Umsetzungsgesetz_in_Kraft.html