Europe vs. China vs. US: Who Controls Your Tech?

Europe vs China vs US: Who Controls Your Tech?

What if your biggest cyber risk isn’t your vendor, but where your vendor is based?

Organizations today rely heavily on foreign technology. Chinese components are embedded across infrastructure, while much of the cloud and software ecosystem is controlled by US providers. In many cases, these systems support critical functions, without organizations having full control over how they operate or where data flows.

In this episode of Threat Talks, Lieuwe Jan Koning, Co-Founder and CTO at ON2IT Cybersecurity, speaks with Lokke Moerel, Professor of Global ICT Law at Tilburg University and one of Europe’s leading experts on cybersecurity regulation, to unpack how the EU is responding.

The focus is not on adding more rules, but on fixing the system itself. The new cybersecurity package aims to reshape supply chain security by introducing a more consistent certification approach, improving incident notification, and separating technical security requirements from geopolitical decision-making.

The goal is not more regulation. It is clearer accountability. For organizations, this means rethinking how they approach supplier risk and cybersecurity risk mitigation strategies in an environment where dependency on external providers is no longer just an operational issue, but a core security concern.