Are you keeping pace with cyber security? Is your company well protected against hacker attacks? The new NIS 2 Directive provides new requirements and measures in this area and will affect many companies in Europe. It was adopted in 2022 and is currently being transposed into German and Austrian law.

The NIS-2 directive contains extended mandatory security measures with specific minimum requirements for, among other things, concepts for risk analysis for information systems and security for information systems, crisis management and BCM, incident management, supply chain security, cyber hygiene and much more.

Have you already established a process for reporting cyber security incidents in your risk management system? Have you already developed concepts for risk management and the security of network and information systems?

Great! Then you are already well on your way. If these topics are still open for you and your company falls within the affected sectors and thresholds, our recommendation is to start implementing NIS 2 compliance as soon as possible.

Depending on which systems and processes are already in place, the project duration for the implementation of NIS 2 may take several months.

In the GRC platform CRISAM®, implementing the NIS 2 guideline is easy. Integrate NIS-2 into your existing ISMS and also use dashboards and customized reports to generate exactly the evaluation and documentation options you need at the touch of a button.

The implementation of the NIS 2 guideline should not be a “necessary evil” from a company’s point of view, but should rather be seen as an opportunity to send signals. This means that you meet the highest European standards in the area of cyber security and are optimally prepared for hacker attacks.

Business processes are better protected and the risk of data loss and operational downtime is significantly minimized.

In addition, you protect your company from severe penalties, which can range from seven to 10 million euros or 1.4-2% of total annual turnover (depending on which category your organization falls into).