Book a free call

MyCyberWayNewsroom

Cyber security news, as it breaks.

Updated 133 stories in 24 hours

Published
Source
European Commission Official
Filed under
Regulation, AI for defence

First harmonised standard supporting the AI Act published in the Official Journal Anonymous (not verified) Mon, 10/19/2026 – 09:37 The European Commission has published the reference to the first harmonised standard supporting the implementation of the AI Act in the Official Journal of the European Union. The standard, EN 18286:2026 – Artificial intelligence – Quality management system for EU AI Act regulatory purposes, developed by CEN and CENELEC, provides a clear legal pathway for providers of high-risk AI systems to…

Originally reported byEuropean CommissionRead the full story on European Commission (opens in a new tab)

What it means for organisations

  • Check whether it applies to you – by sector, size and the services you provide.
  • Map it to the controls you already have: most new rules ask for evidence of things you should already do.
  • Keep records of decisions, risks and incidents – regulators ask for evidence, not intentions.

MyCyberWay training

Compliance · part of our training

Regulation lands on the security team. We teach how it works day to day.

Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.

  • ISO 27001 Annex A and NIST CSF 2.0
  • CIS Controls v8 and Cyber Essentials Plus
  • Audit evidence with Purview and Intune

See how it's taughtCompare the programmes

MyCyberWay career serviceBook a free 20-minute fit call.Book a free fit call (opens in a new tab)

Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.