[go: up one dir, main page]
Scribd
Upload
66 views9 pages

NIS2 - What You Need To Do Now

The NIS2 Directive aims to enhance the cybersecurity of EU critical infrastructure entities through two main pillars: Duty of Care and Duty to Report. Organizations are required to implement robust risk management measures and establish processes for reporting significant security incidents. Non-compliance can result in substantial fines and potential suspension of business operations for essential and important entities.

Uploaded by

czr0crs
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
66 views9 pages

NIS2 - What You Need To Do Now

The NIS2 Directive aims to enhance the cybersecurity of EU critical infrastructure entities through two main pillars: Duty of Care and Duty to Report. Organizations are required to implement robust risk management measures and establish processes for reporting significant security incidents. Non-compliance can result in substantial fines and potential suspension of business operations for essential and important entities.

Uploaded by

czr0crs
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 9

ARE YOU READY FOR NIS2?

WHO IS AFFECTED?
NIS2 IS HERE
The Network Information
Security Directive (NIS2) is
designed to strengthen the
cybersecurity posture of EU
critical infrastructure entities or
industries to meet basic
compliance requirements.
IN A NUTSHELL
The NIS2 directive is built on
two main pillars to strengthen
cybersecurity and overall
resilience...

Duty of Care
Duty to Report
DUTY OF CARE
Organizations must implement
strong risk management and
business continuity measures to
reduce cyber risks
risks.. This includes
incident management, supply
chain security, enhanced
network and access control,
encryption, system recovery,
emergency procedures, and a
crisis response team.
DUTY TO REPORT
Essential entities must set up
processes to quickly report
significant security incidents
incidents,,
including a 24-hour ‘early
warning’ system.
NIS2 emphasizes corporate
accountability, requiring
management to be involved in
and knowledgeable about
cybersecurity measures
measures..
CONSEQUENCES
Under the NIS2 Directive,
companies are required to
improve cybersecurity
cybersecurity,,
communicate with supervisory
authorities, and transparently
report breaches.

Fines vary for "Essential" and


"Important" entities.
FINES
Essential Ent
Entities
ities could face
fines up to €10 million or 2%
of total turnover
Important Entities could face
fines of up to €7 million or
1.4% of total turnover.
Regulators may suspend
business operations if critical
to network security.
WHO IS AFFECTED?
Essential Entities (EE)
Size threshold: varies by sector,
but generally 250 employees,
annual turnover of € 50 million,
or balance sheet of € 43 million.
Energy
Transport
Finance
Public Administration
Health
Space
Water supply (drinking & wastewater)
Digital Infrastructure
WHO IS AFFECTED?
Important Entities (IE)
Size threshold: varies by sector,
but generally 50 employees,
annual turnover of € 10 million
or balance sheet of € 10 million.
Postal S
Services
ervices
Waste Management
Chemicals
Research
Foods
Manufacturing
e.g. medical devices and other equipment
Digital Providers

You might also like