What is the NIS2 guideline?

The Network and Information Security Directive 2 (NIS2) is a new European legislation that strengthens cybersecurity requirements for key and important sectors in the EU. This directive replaces the original NIS1 directive and aims to ensure a higher level of cybersecurity throughout the European Union.

What are the differences between NIS(1) and NIS2?

Why is the NIS2 guideline important?

The NIS2 Directive is crucial for strengthening cyber resilience in the EU.
With the increasing threat of cyber attacks and growing dependence on digital services, it is essential that organizations implement robust cybersecurity measures to protect their network and information systems.
The directive helps create a unified approach to cybersecurity across the EU, contributing to the protection of critical infrastructures and the continuity of essential services.

Which companies are covered by the NIS2?

Essential Entities:

These include organizations that provide critical services whose disruption could have significant impacts on society and the economy.
Examples include:

Energy: Electricity suppliers, oil and gas producers and distributors.
Transportation: Airlines, airport operators, rail operators, and maritime ports.
Banks: Credit Institutions.
Financial Markets: Stock Exchanges and Central Counterparties.
Healthcare: Hospitals, clinics, and other healthcare facilities.
Drinking water supply: Suppliers and distributors of drinking water.
Digital Infrastructure: Internet Exchange Points, DNS service providers, and data centers.

Major Entities:

These include sectors where a disruption could have significant impact, but may have a less direct impact than essential entities.
Examples include:

Digital Services: Online marketplaces, search engines, and social networks.
Food: Production, processing, and distribution of food.
Space: Operators of ground infrastructure for space-based services.
Postal and Courier Services: Mail and package delivery services.
Wastewater management: wastewater management and treatment.
Manufacturers of essential products: Manufacture of essential pharmaceuticals and medical devices.