One of the biggest components in successfully managing your cybersecurity programs is a strong risk management plan. In order to successfully mitigate risks, they must be prioritized based on their overall effect on the organization. The major keys to reducing the impact of any risk to a project are to recognize, prioritize, and control. [...]
One of the goals of the 2016 NIS Directive was to harmonize Member States’ cybersecurity protection initiatives and to boost the EU’s overall level of cybersecurity.
Despite all the attempts to achieve this goal, there remains fragmentation standing in the way of a single European approach.
This is undermined by increased complexity in the interplay between the NIS and other EU laws.
On 16 December 2020, the European Commission adopted a proposal for a revised Directive (‘NIS2’).
The proposed changes include:
– Widening the scope of the current regime, bringing in new sectors such as the postal services, food, and manufacturing of certain critical products such as pharmaceuticals.
– Introducing a clear size cap (meaning all medium and large companies in the relevant sectors would be in scope) while retaining the ability to bring small, high-risk entities, in scope.
– Eliminating the current distinction between operators of essential services and digital service providers. Instead, entities would be classified based on their importance, with a different regime for those that are essential and those that are important.
– Strengthening the security requirements, providing a minimum list of basic security elements that have to be applied, and introducing more precise incident response reporting requirements.
– Addressing supply chain risk and management accountability.
– Enhancing the enforcement provisions and aiming to harmonize sanctions across the Member States.
What’s next?
While a revised NIS regime is a key part of the EU’s new cyber strategy, it will be some time before any new rules take effect. The proposal will now be subject to negotiations between the legislators (notably the Council of the EU and EU Parliament), which can take time. Once agreed and adopted Member States will then have a further 18 months to transpose it into local law.
We, at SANDLINE through CENTRALEYEZER, think that the revised NIS directive should:
That will help us to offer with our powerful CENTRALEYEZER the best services for applying the NIS directive to our customers and to be part of a safe European cyber-environment.
In mid-March last year, the WHO officially declared that the world was facing a pandemic, and countries were in a hurry to take measures to stop the spread. A rational ...
