DACH IT MARKET BRIEF

Updates on continuous cyber defence and dependencies

AI-assisted testing and European risk reports highlight validated attack paths and service-provider dependencies.

Continuous testing becomes a service

Palo Alto Networks introduced Unit 42 Continuous Frontier AI Defense, an expert-led service for ongoing discovery, validation and remediation of attack paths.

For sales practice: Our sales takeaway: explore the gap between a security test, changes to the environment and retesting to qualify a need for continuous validation.

Status and context: Vendor statements describe the offering and do not independently establish a specific protection outcome.

ENISA: dependencies can amplify impact

ENISA Threat Landscape 2026 addresses supply-chain and third-party risks. It analyses events from 2025 and highlights interconnected digital services and infrastructure.

For sales practice: Identify critical providers, shared platforms and recovery dependencies to establish concrete assessment and resilience needs.

Status and context: The 2026 publication does not measure all incidents occurring in 2026.

Financial services: assess external dependencies

In their autumn risk update, EBA, EIOPA and ESMA warned about external dependencies and cyber risks, particularly reliance on ICT providers outside the EEA.

For sales practice: Our sales interpretation: discuss alternatives, evidence and tested exit scenarios with regulated customers, involving technical and business decision-makers.

Status and context: The risk update is a supervisory signal, not an assessment of specific DORA obligations.