Call us now:
Brian D. McCarthy the EU moves another inch closer to the adoption of cybersecurity risk management regulation, as the German Government ratifies EU NIS 2 regulation. A further example of an EU member states focus on cybersecurity regulation.
For those countries outside the EU one must consider the effects of the significant cyber regulations EU member states are adopting inc. EU NIS 2, DORA, the CER and the CRA. As these regulations affect both EU Member state entities and those organisations that sit within the supply chains of those entities.
For UK industry this is a major consideration. There are no dispensations, there is no room to manoeuvre. If a EU member state company is effected by these regulations then so are those its supply chain. These regulations are not cybersecurity regulations they are cybersecurity risk management regulations and suppliers are a significant risk to cybersecurity. They require companies to understand and address cyber risk, wherever it resides.
If one believes that cyber essentials will suffice, then please read the regulation that the German Government has adopted. Cyber Essentials will not address the requirements set out in NIS 2, DORA, the CER or CRA. ENISA recently published a controls cross walk that included 45+ ISO 27001 controls for NIS 2 compliance.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7358423299732709378