our offer

Ensuring compliance with NIS2, DORA, CER

The NIS2 Directive on measures for a high common level of cybersecurity within the territory of the Union, known as NIS-2, is EU-wide legislation that, by introducing legal measures, forces regulated entities to undertake significant technical and organizational changes. 

The NIS 2 directive gives way to the previous division into key service operators, digital service providers and public entities. According to estimates, there will be more than one million regulated entities within the European Union, covering many sectors previously outside the scope of regulators’ attention.

The most significant change resulting from NIS-2 is the introduction of penalties:

• valid entities committing violations will be subject to administrative fines of a maximum of at least EUR 7,000,000 or 1.4% of the total annual worldwide turnover in the preceding fiscal year of the company to which the valid entity belongs, with the higher amount applying
  

The following measures, among others, have been imposed on NIS2 covered entities:

• risk analysis and information systems security policies; 

• incident handling;

• business continuity assurance, such as backup and disaster recovery management; and crisis management;

• supply chain security, including security-related aspects of the relationship between each entity and its direct suppliers or service providers;

• security in the acquisition, development and maintenance of networks and information systems, including the handling and disclosure of vulnerabilities; 

• policies and procedures for evaluating the effectiveness of cyber security risk management measures;

• basic cyber hygiene practices and cyber security training; 

• policies and procedures for the use of cryptography and, where applicable, encryption;

• human resource security, access control policies and asset management;

• the use of multi-factor or continuous authentication, secure voice, text and video communications, and secure communications systems within an entity during emergencies.

CISO4U will ensure your company adapts to the requirements of the NIS2 and DORA directives, will allow you to meet the initial conditions and ensure ongoing compliance with the regulations. 

The CISO4U consulting service along with continuous monitoring of customer’s infrastructure allows you to report potential incidents within the timeframe required by law, which minimize the risk of possible financial sanctions (administrative penalties).

NIS-2 Directive essential and important sectors

Important sectors:

• • Postal and courier services
  • Waste management
  • Chemicals (manufacture, production, distribution)
  • Food (production, processing, distribution)
  • Manufacturing (medical devices; computer, electronic and optical products; electrical equipment; machinery; motor vehicles and (semi-)trailers; 
    transport equipment)
  • Digital providers (search engines, online market places and social networks) 

Our offer