EU expanded cyber-resilience framework. Transposition deadline 17 October 2024; obligations apply country-by-country through national law; transposition uneven.