Call us now:
One has to give it to our EU colleagues, when all 27 member states get behind a problem it gets focus. As is the case with cyber regulation, in this case EU NIS 2.Why is the enclosed document important? It’s regulation for the implementation of EU NIS 2. It defines the expectations of the European Commission for the 27 member state to comply with the NIS 2 Directive. Meaning this document is law.Why care? For those covered CNI companies, and there’s likely over 150,000 of them. Attention should be paid to the areas of risk management, governance, critical incident definitions, V&P, monitoring, testing, SDLC and education. The document defines what compliance to the directive requires, it defines the guard rails for compliance to NIS 2. Guard rails that regulators and lawyers can focus in evaluating whether covered organisations comply with the spirit and intent of the law. Whether or not covered boards have put in place the appropriate oversight and assurance needed to comply.One is concerned that many companies do not have the necessary skills, knowledge and experience to comply to NIS 2. A reason why we Veritas GRC wrote our board and staff education programs. Addressing the necessary oversight and assurance to comply to cybersecurity risk management regulations including EU NIS 2, with our legal and assurance partners.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC European Commission#cybersecurity #cyberriskmanagement #cyberregulation #eunis2
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7267856477170634754