Evidence behind the claims

This index collects external publications, standards, authority pages, and technical resources that support statements on the website. Glossary sources remain linked directly on each glossary entry.

  1. Open sourceAnnual ENISA threat landscape report on observed cyber attack trends across the EU.

    Annual ENISA threat landscape report on observed cyber attack trends across the EU.

  3. Open sourceOfficial EUR-Lex text of Regulation (EU) 2024/2847 covering manufacturer obligations, essential cybersecurity requirements, technical documentation, conformity assessment, SBOMs, and CE marking.

    Official EUR-Lex text of Regulation (EU) 2024/2847 covering manufacturer obligations, essential cybersecurity requirements, technical documentation, conformity assessment, SBOMs, and CE marking.

  4. Open sourceRegulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements.

    Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements.

  5. Open sourceOfficial EUR-Lex text of the EU Machinery Regulation covering conformity, CE marking, protection of compliance-relevant software and data, and the safety of control systems.

    Official EUR-Lex text of the EU Machinery Regulation covering conformity, CE marking, protection of compliance-relevant software and data, and the safety of control systems.

  6. Open sourceConsolidated text of EU Directive 2022/2555 (NIS2) on measures for a high common level of cybersecurity across the Union.

    Consolidated text of EU Directive 2022/2555 (NIS2) on measures for a high common level of cybersecurity across the Union.

  7. Open sourceFachsprechpartner website with information about its collaboration with secnostic.

    Fachsprechpartner website with information about its collaboration with secnostic.

  8. Open sourceFlexera 2025 report on IT asset management, technical visibility, and governance challenges.

    Flexera 2025 report on IT asset management, technical visibility, and governance challenges.

  11. Open sourceCurrent German statutory text on building automation and control in specified non-residential buildings, including energy monitoring and interoperability.

    Current German statutory text on building automation and control in specified non-residential buildings, including energy monitoring and interoperability.

  12. Open sourceIBM and Ponemon 2025 report on breach costs, detection, automation, and organizational factors.

    IBM and Ponemon 2025 report on breach costs, detection, automation, and organizational factors.

  13. Open sourceIBM explainer on IT service management, service requests, IT support, IT asset management, and change management.

    IBM explainer on IT service management, service requests, IT support, IT asset management, and change management.

  15. Open sourceIETF specification of TLS 1.3 with server and optional client authentication. General protocol reference, not a statement about a product's TLS version.

    IETF specification of TLS 1.3 with server and optional client authentication. General protocol reference, not a statement about a product's TLS version.

  16. Open sourceOfficial ISO page for the data communication protocol used to monitor and control HVAC/R and other building systems.

    Official ISO page for the data communication protocol used to monitor and control HVAC/R and other building systems.

  17. Open sourceOfficial ISO page for ISO/IEC 27001:2022 information security management systems.

    Official ISO page for ISO/IEC 27001:2022 information security management systems.