Side by side

The regulations and the concepts that get confused for each other, compared from the book's data and glossary.

Regulations

CRA vs PSTI — EU Cyber Resilience Act vs UK PSTI Act.
CRA vs ETSI EN 303 645 — EU Cyber Resilience Act vs ETSI EN 303 645.
CRA vs NIS2 — EU Cyber Resilience Act vs EU NIS2 Directive.
CRA vs RED delegated act — EU Cyber Resilience Act vs EU Radio Equipment Directive, cybersecurity delegated act.
PSTI vs ETSI EN 303 645 — UK PSTI Act vs ETSI EN 303 645.
CRA vs Cyber Trust Mark — EU Cyber Resilience Act vs US Cyber Trust Mark.
IEC 62443-4-2 vs NIS2 — IEC 62443-4-2 vs EU NIS2 Directive.
FDA 524B vs IEC 81001-5-1 — FDA premarket cybersecurity vs IEC 81001-5-1.
ISO 27001 vs CRA — ISO 27001 / 27002 vs EU Cyber Resilience Act.
GDPR vs CRA — GDPR vs EU Cyber Resilience Act.

Prototype vs MVP in hardware — A prototype answers whether the thing can be built and how it feels; an MVP answers whether anyone wants it.
Proof of concept vs prototype — A proof of concept shows a technical idea works at all, usually on a bench, with no user in sight.
Mockup vs prototype — A mockup does not work and is not supposed to.
Edge AI vs cloud: where should compute live? — Edge AI runs on the device: fast, private, and working when the network is not, at the cost of silicon, power and a model that cannot be swapped overnight.
Recurring revenue vs the one-time sale — A one-time sale is judged by unit economics: does a single manufactured unit earn a profit once it is sourced, built, tested and shipped at scale.
Positioning map vs perceptual map — A perceptual map records how the market already sees competing products: the customer's mind, measured.
Moat vs switching cost — A switching cost is what one customer gives up to leave; a moat is what keeps a whole market of competitors from copying you.
Planned obsolescence vs right to repair — Planned obsolescence is a design decision: the product becomes outdated or unsupported on a schedule the maker controls.