Onestop App

Περιγραφή

The research will investigate how the EU’s three flagship digital-security laws—the AI Act (algorithmic risk, transparency, human oversight), the Cyber-Resilience Act (secure-by-design product lifecycle) and NIS2 (risk-management and incident-reporting for critical entities)—interact when applied to the same organisation or system. By mapping overlapping, complementary and conflicting obligations, and by quantifying the cost-versus-risk reductions each law implies, the study aims to build a multi-objective decision framework that lets regulators, auditors and CISOs see the “sweet spots” where simultaneous compliance is both affordable and effective.
Regulatory overlap & conflict: Which specific articles and conformity-assessment requirements of the AI Act, CRA and NIS2 reinforce one another, and where do they impose contradictory or duplicate controls on data governance, vulnerability management and incident reporting?
Cost–risk trade-off modelling: How can a multi-objective optimisation or MCDM model quantify the trade-offs among compliance cost, residual cyber-risk and legal liability when an organisation attempts to satisfy all three regulations in parallel?
Harmonisation scenarios: Under what policy adjustments (e.g., unified certification schemes, mutual-recognition clauses, shared technical standards) would the combined regulatory burden drop without eroding the security and trust goals each law pursues?

Στοιχεία Εργασίας