Berlin: security incidents also test organisations
The August brief covered the cyberattack on Berlin’s administration network. Official information confirms data exfiltration and ongoing investigation, including communication with affected individuals.
For sales practice: Our sales takeaway: qualify detection, escalation, crisis communication and recovery as a connected process.
Status and context: The official page is updated over time; the extent and individual impact remain part of the investigation.
CRA: short deadlines need a working process
The brief addressed preparation for CRA reporting of actively exploited vulnerabilities and severe security incidents. ENISA materials describe the staged reporting process and central platform.
For sales practice: Our interpretation: ask manufacturers how detection, assessment, approval and cover work across technical, product and executive teams.
Status and context: Manufacturer reporting obligations apply from 11 September 2026; applicability and the reporting trigger require assessment.
Managed security: demonstrate the service
ENISA consulted on the draft European EUMSS certification scheme, including common requirements and an initial focus on incident response.
For sales practice: Our sales takeaway: specify scope, availability, handovers and evidence of operational quality so customers can compare managed-security services.
Status and context: A consultation draft is not an existing general certification obligation. The consultation closed on 13 September.