@patrickcmiller if these regulations prevent the private sector from allocating the budget to lower/suppress dependance of EU on information security systems and cryptography from other geopolitical blocks, these regulation contribute for nothing and could even lower the resilience of EU information systems against nation state attacks from these other blocks. Trojan horses hidden in security tools or cryptographic code (key generation, location of the personalization of security tokens,...) are critical to ensure the security and resilience of assets. Time to wake up. This is not anymore "business as usual" and security by paperwork compliance times. This is survival preparation times. All should focus on "what matter most" assets and core security systems design and real implémentation on the field, not on "big high level theoritical compliance plans" that engulf money into not preparing for the worst including from suppliers that outsourced everything related to infosec to other blocks. This is the harsh reality that nobody can be blind of.