In today’s rapidly digitizing world, the new European Directive on Network Information Security—known as NIS2—is more than just a new set of rules. It is a necessary step—and, for many, a mandatory one—to ensure your organization’s cybersecurity. Find out what NIS2 entails, whether your organization is subject to it, and why it’s crucial to set aside time for it now—as well as the potential risks you can’t afford to ignore.
What is NIS2?
NIS2, a response to growing cyber threats and accelerated digitalization, has been in effect since January 16, 2023. It aims to ensure a uniform and high level of security for networks and systems throughout the EU, with a compliance deadline of October 17, 2024.
Who is subject to NIS2?
The scope of NIS2 has been significantly expanded and now includes “critical entities,” such as energy companies, water authorities, ICT service providers, government agencies, and the healthcare sector. These are entities whose failure would have a massive impact on society. In addition, NIS2 applies to so-called “important entities,” including digital service providers, courier services, and postal companies. You can find out whether you are required to comply with NIS2 on this page of the National Cyber Security Center.
Why make time for this now?
The 2024 deadline is fast approaching, and with NIS2, preparation is crucial. Organizations must not only report cyber incidents more quickly, but also comply with stricter cybersecurity requirements. Furthermore, timely implementation gives you a head start and helps avoid last-minute stress.
Don’t Ignore Potential Risks
Failure to comply with NIS2 can have serious consequences, including fines and reputational damage. The consequences are not only business-related but also affect management: company executives bear personal liability, which underscores the importance of taking this issue seriously in the boardroom.
The Future of Cybersecurity in the Netherlands
With the implementation of NIS2 at the end of 2024, it will undoubtedly become more challenging for cybercriminals to gain access. This is an opportunity to proactively strengthen your organization’s digital resilience. Contact us today if you need help or advice with this.
Kenneth van Surksum – Owner of Secure At Work & MVP
Back to Blogs
