EU regulatory updates drive new compliance and cybersecurity requirements

Brain-Media.de has released BAM Core 2.0, an update to its open-source compliance data model designed to track legislative changes. The new Regulatory Change Management layer allows the model to monitor ongoing EU legal amendments, such as the AI Omnibus, which shifted high-risk deadlines for the EU AI Act. The model automatically calculates which compliance objects are affected by these changes, distinguishing between deadline shifts and necessary content adjustments to controls or evidence.

Concurrently, the implementation of the EU Cyber Resilience Act is shifting corporate security requirements toward continuous vulnerability management. Companies must now adhere to strict reporting timelines, including early warnings within 24 hours and full reports within 72 hours. The rise of AI-driven security tools from providers like Microsoft, Oracle, and Apple is increasing the number of identified vulnerabilities, placing a higher administrative and operational burden on IT departments to prioritize and deploy patches across digital supply chains.