Call us now:
When we discuss EU NIS 2, we often focus on its effects on the 150,000 or so CNI companies that it will likely affect.
However, the EU is not just a cybersecurity risk management program for CNI. It sets out regulatory requirements for EU Member states to deliver National cybersecurity strategy, implement a National cyber regulation focused on Corporate governance, Cyber risk management, assurance, and Reporting and regulatory oversight, and assurance of covered entities that include CNI, Banking, Financial Market Infrastructure, Digital Infrastructure, ICT Service management, and, importantly, Public Administration.
When you consider the size and scale of the public administration entities, such as central and regional government and administration, it is very easy to double the number of entities affected by EU NIS2 across all 27 EU member states.
Hence, organisations such as the Federal Office for Information Security (BSI) are taking the lead. Building out their programs for the cybersecurity of the Federal Government, a significant plank in NIS 2 cybersecurity risk management.
Liz Sandwith CFIIA, we must not forget that oversight and assurance of regulatory compliance with EU NIS 2 is a significant undertaking. That requires coordination across the first, second, and third lines.
Faisal Khan Ryan Buckner Michael G. Jacobides Georgios Alevras
@Parava Security Solutions
#eunis2 #cyberriskmanagement #cyberoversight #cyberassurace #cyberaudit
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7458815542519410688