Is Your Organization Ready for NIS2?

The deadline for member states to transpose NIS2 into national law happens on 17 October. If you’re one of the member states of the European Union (EU), or if you are a supplier to an organization that does business in those member states, chances are your organization has already been thinking about NIS2 compliance.

Here are three things to consider:

NIS2 expands requirements, applies to more organizations

NIS2 builds on a lot of the requirements that NIS1 put into motion. While NIS1 went a long way toward improving the level of security across the EU. NIS2 adds more requirements, but more importantly, NIS2 expands requirements to a broader set of companies beyond regulated industries and critical infrastructure—by some estimates, NIS2 applies to 160K more organizations than its NIS1 counterpart.

NIS2 expands accountability to the C-Suite and beyond

NIS2 is also about expanding accountability within those organizations it applies to. With NIS2, compliance and cyber readiness is no longer just the purview of IT and security departments. It also requires senior executives and even board members to sign off on compliance requirements and even risk response when a breach occurs.

NIS2 shines a light on incident recovery

In today’s digital world, all companies have a vested interest in securing their businesses. But when a breach occurs, NIS2 requires organizations to have incident management procedures in place to ensure they can quickly and effectively detect, respond to and recover from cyber incidents. In this aspect, NIS2 compliance may prompt applicable organizations to review and update their existing business continuity protocols. 

Keeping data secure is core to what we do here at Forcepoint. If you’d like to better understand our approach to data privacy and data security, I invite you to visit our Forcepoint Trust Hub. Also, feel free to reach out if you’re ready to speak to a data security expert. 

Additional NIS2 Resources

• Official NIS2 Directive homepage
• Official NIS2 Directive FAQs
• NIS2 Series (part 1): What is NIS2?
• NIS2 Series (part 2): Role of Risk Management
• NIS2 Series (part 3):  Effective Incident Management
• NIS2 Series (part 4): Information Security Awareness