Understanding the NIS2 Directive

The NIS2 (Network and Information Systems) Directive, effective since January 16, 2023, marks a significant shift in the European Union's approach to cybersecurity. Expanding the scope to include more sectors and companies, it aims to bolster the resilience of critical infrastructures against cyber threats. With its implementation deadline set for October 17, 2024, businesses need to be proactive in understanding and complying with its requirements.

Industries affected by the NIS2 Directive

• For CEOs and Managing Directors: Under NIS2, you are directly accountable for your company's cyber risk management. This includes approving, monitoring, and ensuring the effective implementation of cybersecurity measures. ForeNova's suite of services can guide you in developing and maintaining a robust cyber defense strategy.
  
  
• For CISOs and IT Security Managers: The directive tasks you with the tactical implementation of cybersecurity practices. From incident response to access control, ForeNova's NovaMDR and NovaCommand solutions align with your operational needs, ensuring comprehensive security management.
  
  

The requirements of the NIS2 are legally binding on the entities that fall under its purview. Member States have the discretion to penalize non-compliant entities with dissuasive penalties as well as administrative fines. In general, essential entities that fail to comply with its directives may be fined up to €10 million or 2% of their total turnover worldwide – whichever is higher. Important entities that fail to comply with the NIS2 may be fined up to €7 million or 1.7% of global turnover. In addition, non-compliant companies may be forced to suspend their business activities until they meet the NIS2 requirements and achieve 100% compliance. 

Learn more about the NIS2 Directive