This is an important document, that sets a standard for cybersecurity risk management compliance for CNI companies across the EU.

← Back to Blog

This is an important document, that sets a standard for cybersecurity risk management compliance for CNI companies across the EU.

Last week European Union Agency for Cybersecurity (ENISA) published its technical guidance for compliance to EU NIS 2. It’s a comprehensive document addressing the EU Commissions implementation regulation published in October 2024.

The mapping table sets out the compliance standards required to meet the minimum compliance to EU NIS 2. Its presents a comprehensive list of 43 cybersecuirty risk management compliance categories and the associated control standards including ISO 27001, CSF2, ETSi EN 319 401 v3.1.1, ETSI Standard EN 319 401 V3.1.1 CEN/TS 18026:2024 BE-CyFun 2023 FI-Kybermittari EL- Ministerial decision 1689/2025 and ENS-Royal Decree 311/2022.

One is interested to understand the number of companies across EU member states that can meet this minimum level of cybersecurity risk management compliance today. Their plans to meet the 49 control categories set out by the ENISA guidance. Cybersecurity risk management compliance is a significant, complex and necessary undertaking. As demonstrated by ENISA guidance.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberattack

https://lnkd.in/eZMRihdv

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7345368626448793600

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags