L4-M5 / lesson 2 of 2
The company plans to reuse the system in an industrial device.
Start here / A workplace decision
The company plans to reuse the system in an industrial device.
A previous review covered a different product and use.
Before you read / Think it through
Pause and form your answer, then compare the reasoning. This reflection is not scored.
Reassess the new scope, sector and applicable route.
The ideas below give you a method for this decision. Then work through the rest of this case and try the decisions yourself.
Check NIS2 scope and national implementation for the entity.
Check DORA scope and relevant financial ICT arrangements.
Being a supplier to a bank does not make every supplier obligation identical to the bank's. Analyse contracts, role and any specific oversight status.
Coordinate risk, supplier and incident evidence across regimes.
A company offers an AI product to a financial institution and plans to reuse it in a connected industrial device. Its roadmap contains a single task called obtain ISO certification. The team assumes this will satisfy the AI Act, DORA and cybersecurity rules. It has not identified the product routes, contractual evidence or phased application dates.