NIS2

What is NIS2?

NIS stands for Network and Information Security and the directive focuses on critical companies such as those in the water and telecommunications industries. The European Union recently concluded that the 2016 Directive for the security of networks and information systems no longer cut the mustard and have therefore been working on the new and updated NIS2, which goes a step further by boosting security requirements across Europe to cover a greater number of industries.

NIS2 – Important points at a glance.

We’ll keep you up-to-date on all things NIS2 right here. Looking for a practical overview for future reference or to share with your colleagues? Our free infographic gives you exactly that. Simply save the file so you always have the most important points to hand.

VIEW INFOGRAPHIC (NL)

What is NIS2?

NIS stands for Network and Information Security and the directive focuses on critical companies such as those in the water and telecommunications industries. The European Union recently concluded that the 2016 Directive for the security of networks and information systems no longer cut the mustard and have therefore been working on the new and updated NIS2, which goes a step further by boosting security requirements across Europe to cover a greater number of industries.

What is NIS2?

NIS stands for Network and Information Security and the directive focuses on critical companies such as those in the water and telecommunications industries. The European Union recently concluded that the 2016 Directive for the security of networks and information systems no longer cut the mustard and have therefore been working on the new and updated NIS2, which goes a step further by boosting security requirements across Europe to cover a greater number of industries.

What are the directive’s provisions? 

Every organisation affected by the NIS2 Directive is obliged to comply with some essential minimum requirements including those related to crisis management in the event of a considerable cyber incident and the use of cryptography and encryption.

These companies also have a very strict obligation to report incidents within 24 hours of becoming aware an incident has taken place and to follow that up within a month with a comprehensive report.

Which sectors are affected?

Previously, it only applied to healthcare, transportation, banking and financial market infrastructure, water, energy, and digital infrastructure providers, but the new NIS2 Directive has expanded its scope to cover organisations that are critical to society, such as:

• Telecommunications and energy providers
• Railway operators
• Waste and water management companies
• Financial services
• Post and courier services
• Manufacturers of medical devices
• Public administration.

Powered by: