Compromised OT/ICS in rail signalling, port cranes, aviation ground systems or fleet management platforms can delay or halt operations entirely.
When Transport Management Systems, Fleet Telematics, Port Operating Systems, baggage systems or cargo handling software go offline, delays cascade across terminals, hubs and routes.
Tampered data in navigation systems, GPS spoofing, falsified cargo manifests, or disabled safety sensors can put crews, passengers and cargo at risk.
Service-level violations, demurrage, missed delivery slots, fuel cost spikes and rerouting operations create significant financial losses.
A single cyber incident can affect international trade lanes, airport operations, cross-border mobility and public transportation reliability.
Adopted in 2022 and applicable from January 2025, DORA establishes a unified EU framework for ICT risk management in financial entities. It mandates incident reporting, digital resilience testing, third-party risk oversight, and governance accountability for operational continuity.
Entered into force in January 2023, with transposition required by October 2024, NIS2 expands cybersecurity obligations across essential sectors, including finance. It requires risk management measures, mandatory incident reporting, supply chain security, and executive-level accountability.
Effective since 2018, PSD2 regulates electronic payments in the EU and introduces strong customer authentication (SCA). It mandates secure APIs for open banking, enhances consumer protection, and enforces controls to reduce fraud in digital payment services.
Enforced since May 2018, GDPR governs the processing and protection of personal data across the EU. It mandates lawful data handling, breach notification within 72 hours, data subject rights and significant penalties for non-compliance, up to 4% of global turnover.