CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 This is the situation that arises when a product is safe when obtained by a consumer, but when connected to a network, it becomes dangerous due to malicious, incorrect, or careless changes to the operational code. 2.2.2 Technology-specific risks New applications resulting from emerging technologies often offer major advantages over traditional methods; for example, in terms of efficiency and economies of scale. However, there are sometimes specific security risks associated with them. A good example is cloud computing. The big advantage is that the infrastructure no longer needs to be maintained and everything scales with the pace at which the organization grows. A central cloud infrastructure can therefore be professionally well secured. However, the risk is that an unauthorized access suddenly means compromising a very large amount of information. Two economic threats can also be formulated in this regard. First, the world of cloud-based applications is characterized by the presence of a limited number of global players, where economies of scale can be played out, creating a concentration risk. On the other hand, innovation in this market is often offered by new, much smaller players. These young organizations are often not on the same level in terms of performance and maturity of processes. This can lead to misplaced confidence in these applications. Ever-increasing technological development of new (types of) ICT-based products and services in many economic sub-areas also requires supervisory authorities to rapidly evolve market surveillance and inspection capabilities. On the flip side, of course, these technologies sometimes offer advantages for building market surveillance more efficiently. Authorities already pay considerable attention to person-centred aspects around “security” and “privacy”. In contrast, the product-related aspects of these topics, such as regulation and control, are barely covered by the supervisory authorities, if at all. Thus, there is a need to adjust the existing legal framework. This should be done mainly from a European/international framework. The European Cybersecurity Act is an important step in this regard, and requires a clear Belgian implementation. Another common risk is individually protecting internet-connected devices. The biggest recent challenge in this area is the Internet of Things (IoT). 18