Call us now:
One often forgets that EU NIS 2 is a directive, meaning it has to be implemented by EU member states. In response European Union Agency for Cybersecurity (ENISA), the EUs Cybersecurity representative body published its technical guidance on the implementation of EU NIS 2 on the 26th June 2025.
https://lnkd.in/eZMRihdv
The technical guidance highlights the controls the ENISA sets as the MINIMUM controls an organisation required to comply to EU NIS 2 must adopt to demonstrate cybersecurity risk management. To align with current member states cyber controls, ENISA has recommended the adoption of controls that cross walk between ISO standard 27001:2022, NIST Cybersecurity Framework v2.0, ETSI Standard EN 319 401 V3.1.1, CEN/TS 18026:2024, BE-CyFun®2023, FI-Kybermittari, EL- Ministerial decision 1689/2025, ENS-Royal Decree 311/2022 and FR.
The enclosed from ENISA reiterates the necessity of Control Effectiveness testing of those controls identified in its technical guidance.
Veritas GRC will shortly publish its EU NIS 2 program for boards, accountable executives and covered entity staff. We explain the entirety of the regulation, in all EU member state languages and provide cybersecurity risk management guidance to board and their employees. Our board governance over cybersecurity risk management program details the governance, oversight and assurance of cybersecurity control effectiveness needed to manage compliance.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC European Commission
#cybersecurity #cyberriskmanagement #eunis2
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7359887685429198848