NIS2: a solid foundation for cybersecurity

NIS2 is the new European directive for network and information security, replacing the old NIS directive. This directive sets mandatory cybersecurity measures for a wide range of organizations.
‍

• Duty to report: Incidents causing significant disruption must be reported to the relevant authorities, such as the CSIRT, within 24 hours.
  ‍
• Duty of care: Necessary security measures must be taken to ensure digital security and service continuity. Consider creating policies and conducting a risk assessment.
  ‍
• Registration requirement: All essential and significant entities must register in the entity registry accessible through the ''My NCSC'' portal.
  ‍
• Supervision and enforcement: Fines are imposed for failure to comply.

Complying with the NIS2 guideline is a legal requirement, but in addition, it offers multiple benefits to your organization:

• Improved cyber resilience and security of network and information systems

• Meeting legal obligations and avoiding regulatory fines

• Strengthens reputation and trust of customers and partners in your organization

• Increased business continuity with less downtime and more stable operations

• Helps optimize security processes and business operations

‍

In short, complying with the NIS2 guideline is an investment in the future-proofing and success of your organization. We therefore offer GAP analyses so you know exactly what steps are still needed to comply with the standard.

‍

Want to know more about the NIS2? Then be sure to read our blog!