Section 9 Interplay with other legislation The guidance acknowledges the interplay between the Cyber Resilience Act and other EU legislation, such as NIS2 and DORA, but does not provide practical direction on how overlapping obligations should be operationalised.
IC
IS-Consulting
Company · Slovakia
3
positions filed
in the 326 files tracked
1
legislative file
of 326 tracked
0
with a full position paper
attached to a submission
Counts here are a floor, never a total: they cover the 326 consultation files tracked so far (29,503 submissions, mostly 2025–26), so an organization's real filing history is larger, not smaller.
Track IS-Consulting in PolicySpeak: request access →
Work at IS-Consulting? so we know who speaks for it.
Their record over time
IS-Consulting filed 3 positions on 21 Mar 2026, across 1 of the 326 legislative files tracked here.
What they argued
Section 7 Dependencies and integrated components The guidance highlights the need to assess risks related to external dependencies but does not clearly define how responsibilities should be allocated when products rely on third-party services or components.
Submitted by REG-DIGITAL (regulatory intelligence platform focusing on EU digital regulation). Section 8 Remote data processing The guidance defines remote data processing based on whether the absence of such processing would prevent the product from performing one of its functions. However, it does not address cases where functionality is only partially dependent on, or enhanced by, external services.
Looking for an argument rather than an organization? Search every submission for a phrase and see everyone who used it.
Is this your organization?
Everything on this page comes from IS-Consulting’s own submissions to the European Commission — we have added nothing and interpreted nothing. If something is wrong or out of date, email info@policyspeak.com and we will correct it. If you are an individual named in a record, our privacy policy sets out your rights to correction, objection and removal.
Quotes are verbatim from submissions published by the European Commission, trimmed to their opening passage and never summarized by a model. Organizations only, never individuals. Reused under Commission Decision 2011/833/EU; the European Commission is not liable for this reuse.