Call us now:
The scope of applicability for EU NIS 2 is very clear. It is defined by the EU Commission and is being transposed by each of the 27 EU Member states. Each member state is working through the development of its national cyber strategy, implementing the capabilities to assure regulatory compliance with NIS2 and creating a clear, decisive picture of affiliated/ covered enterprises.
NIS2 is a regulation that will affect covered organisations as they are required to comply with cybersecurity risk management, including the identification of cyber risks, cybersecurity, and governance, enforced through personal and corporate penalties. ENISA has set out the applicable cyber standards for cyber risk mitigation and will work with national cyber authorities to ensure EU-wide coordination of cyber incidents and response.
As is clear from the Federal Office for Information Security (BSI), NIS2 applicability is not based solely on company size. NIS2 applicability is based upon headcount, revenue, balance sheet, and critical national and EU-wide importance. As a regulation, it is enforceable by every EU member state.
Compliance is not a simple, it is an exercise of legal, compliance, assurance, risk management, and cybersecurity. Developing a risk-based approach to cybersecurity, with risk mitigation through cybersecurity standards, so boards can assure compliance through governance, at the risk of legal sanctions.
Faisal Khan Liz Sandwith CFIIA Michael G. Jacobides Georgios Alevras Ryan Buckner
@Parava Security Solutions European Union Agency for Cybersecurity (ENISA) European Commission
#cybersecurity #nationalsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7451603248391712768