Directive brings significant changes for cybersecurity in Europe with the NIS2. With the revision of the previous Network and Information Security Directive (NIS Directive), essential aspects of information security come into play.

The focus of NIS2 is on protecting important industries and services from digital threats such as hacker attacks. Its implementation will improve cybersecurity for critical infrastructures and strengthen resilience to cyber threats. In view of the comprehensive innovations, companies should take action to meet the requirements and protect their digital infrastructure. This topic has been on the minds of not only the media but also us for years. Due to this directive, companies must comply with legal requirements. These companies must take appropriate measures to secure their systems and networks. In view of advancing digitalization, the NIS Directive is regularly updated. The NIS2 Directive was published in 2022. EU member states have until October 18, 2024 to transpose it into national law. That gives them exactly one year.

In our view, the NIS2 Directive represents a milestone for European cybersecurity . It defines clear standards that oblige companies and public authorities to assess risks, implement security measures, and respond to security incidents. Violations are consistently punished with higher fines and penalties.

The introduction of the “size cap rule” ensures an uniform logic for identifying critical infrastructures. Cybersecurity risk management, state-of-the-art technical measures, and reporting obligations within 24 hours of an incident are further key aspects.

These requirements can be optimally met by using suitable management systems . With the help of a management system, risk can be minimized and operational business objectives can be controlled and optimized.

We are happy to advise companies without obligation to assess their current security risk or evaluate suitable software.

Share: