One has to give it to our EU colleagues, when all 27 member states get behind a problem it gets focus. As is the case with cyber regulation, in this case EU NIS 2.Why is the enclosed document important? It’s…
2025 maybe the year that the EU focuses on cybersecurity risk management for the EU health sector? Under Ursula von der Leyen, got approval for a new EU commission this week. Christiane Kirketerp de Viron, Acting Director for Digital Security,…
Olaf Classen thank you for posting. A very important read for EU organization required to comply with DORA. TLPT is the start of validation of covered companies cybersecurity.One has been involved in many pen test of financial institutions. Pen testing…
There’s a slow awakening that EU NIS 2 and DORA are on their way and they will affect the boards of covered entities, that includes the potential for civil and criminal penalties and temporary board suspensions. In Ireland alone over…
Olaf Classen BaFin the German Federal Financial Supervisory Authority has started the DORA clock ticking. As it announces that more the 3,600 Financial Institutions must comply with the EU cybersecurity risk management regulation from January 2025. Raising the question of…
On the 27th of March the Belgium Parliaments Commission on Interior Affairs approved a draft law for NIS 2 (EU 2022/ 2055). The bill aims to fully replace the EU NIS 1 Directive in Belgium and forms part of Belgium’s…
One of the biggest problems with cybersecurity risk management governance and remediation, is boards themselves. They do not have the knowledge, skills and experience required to manage, oversight, assure and attest cyber risk. Knowledge Skills and Experience regulations such as…
The European Parliament adopted the text for the Cyber Resilience Act on Tuesday 12th March. The 338 pages of wording presents a complex arrangement of oversight, assurance and attestation of the cybersecurity of a broad range of products and service…
Thank you for posting Olaf Classen. The EU NIS 2 and Resilience of Critical Entities (RCE) are important EU Directives for the protection of Critical National Infrastructure(CNI) and Services. They are complex directives for EU member states to transpose into national…
Thank you for posting Olaf Classen. The effects of supply chain or third party hacks demonstrate the need to ensure supplies can and are able to manage cybersecurity risks. As in this case, public sector organisations and MSPs fall under…
