Call us now:
A great report from ENISA, the European Union Agency for Cybersecurity. Assessing the impact of the current EU cybersecurity framework, and particularly the NIS 2 Directive, on cybersecurity investments and the overall maturity of organisations in scope.When one reads the report there are a number of observations that are not intended to be critical of the report. Far from it NIS 2 is in its infancy, with a long road of compliance ahead for the 27 member states and organisations affected by the Act. It contains some great analysis the EU cyber market and spend. In part highlighting the challenges ahead for compliance to the EU NIS regulation.1. Average EU IT spend is growing by 12% annually.2. Info Sec spend is 9% of IT spend.3. There’s not enough resources across the union to support NIS 2 compliance. Growth in security resources has remained more or less flat. 11% of IT FTEs are allocated to Info SEC. 4. The average cost of a data breaches was EUR 4.4 million. 43% of breaches involved customer PII, 43% IP, 37% Employee PII.5. 60% of breaches exploited known vulnerabilities.6. Figure 16 provides an indicative mean and median IT spend by covered sectors?7. The share of Info sec staff as a percentage of IT staff has declined from 2020.8 Budgets will need to permanently increase to comply with NIS 2 (Figure 44).9. 51% of organisations leadership have participated in dedicated cybersecurity training.10. 85% of leaders approve cybersecurity risk management measures.11. One suspects NIS 2 readiness figures maybe biased. Only 1350 companies completed the survey, possibly larger companies.Figure 27 and 31 indicate the size of companies who complete the survey. One suspects if a broader sample size of affected companies provided input, those with 50 – 249 FTEs (SMEs) then the figures may paint a different story. However the figures demonstrate the challenges ahead for companies affected by EU NIS.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC European Union Agency for Cybersecurity (ENISA)#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7265658724327821312