Skip to content
KamSoft Consultants logo
← All guides
2027 Readiness · Free PDF

The 2027 Readiness Checklist

Four hard deadlines land in 2027. The inventory, budget questions and readiness self-check to turn them into a plan you can defend.

What's inside

  • The four 2027 dates, what each actually requires, and who's in scope
  • The three inventories every one of them starts with
  • The budget questions to answer before you commit next year's number
  • A readiness self-check across compliance, cost, capacity and people

Prefer to talk it through? Book a call.

Get your free copy

Why this guide

Several obligations converge in 2027 and early 2028: the EU AI Act's rules for high-risk systems, the EU Cyber Resilience Act, the UK's Cyber Security and Resilience Bill and the NCSC's post-quantum migration timeline. Each is manageable alone. Together, and on top of normal delivery, they need a plan.

This checklist turns them into one programme. It starts with the three inventories every obligation depends on, sets out the budget questions to answer before next year's number is fixed, and ends with a readiness self-check across compliance, cost, capacity and people.

Common questions

Which 2027 deadlines matter most?

For many organisations: the EU AI Act's high-risk rules from 2 December 2027, the EU Cyber Resilience Act's main obligations from 11 December 2027, and the UK Cyber Security and Resilience Bill's phased duties. Which apply depends on what you build, sell and supply.

Why treat them as one programme?

Because they share most of the work: knowing your systems and suppliers, assessing risk, reporting incidents and evidencing controls. Running them separately duplicates effort and creates gaps between teams.

When should we start?

Now, if any apply. Inventories and supplier reviews take months, and budgets for 2027 are being set at the end of 2026.