Policy
In-depth guides and analysis on policy from the Safeguard engineering team.
4 articles
ENISA Threat Landscape 2025: Supply Chain Section Decoded
ENISA's October 2025 report analysed 4,875 incidents from July 2024 to June 2025 and found phishing led at 60% of intrusions, with supply chain and slopsquatting as fast-growing vectors.
GPAI Code of Practice: The 2025 Signatory Landscape
The General-Purpose AI Code of Practice was published on 10 July 2025 with three chapters. Most major providers signed, with notable partial signatures from xAI.
UK Software Security Code of Practice: The 14 Principles
Launched at CyberUK 2025 on 7 May 2025, the UK's voluntary Software Security Code of Practice sets 14 principles across four thematic areas for vendors and customers.
EU Cybersecurity Reserve: Trusted Providers Under the Cyber Solidarity Act
The EU Cybersecurity Reserve under Regulation (EU) 2025/38 mobilises trusted private incident-response providers to support Member States facing significant cyber incidents.