The new EU NIS2 directive is now applicable by member states
The European Union’s Network and Information Security Directive 2 came into force on October 18 – but what does it mean for everyone?
The European Commission announced on October 17 that its new Network and Information Security Directive 2 (NIS2 Directive) had been officially adopted and would be applicable from October 18 by EU members.
The new regulations apply to critical entities such as data center services, cloud providers, online marketplaces, search engines and social media platforms, which must now comply with new security requirements and notification when it comes to reporting serious cyber incidents.
The new directive also applies to Member States themselves, who will be required to stand up, for example, IT security incident response teams and their own national authorities responsible for networks and information systems.
NIS2 includes 10 “key elements” for compliance, related to supply chain security, vulnerability management and disclosure, incident management, cryptography and encryption.
“Cybersecurity is one of the main building blocks for protecting our citizens and our infrastructure,” Margrethe Vestager, European Commission Executive Vice-President for a Europe fit for the digital age, said in a statement. .
“In today’s cybersecurity landscape, strengthening our capabilities, security requirements and rapid information sharing with up-to-date rules is of paramount importance. I urge other Member States to implement these rules at national level as quickly as possible to ensure that services essential to our societies and economies are cyber-secure.”
However, although the NIS2 directive applies directly to entities operating in the EU, like the UK’s GDPR, the directive will have global implications for any company wishing to do business in the region.
“Meeting NIS2 requirements is crucial to avoiding trade barriers and building trust with EU partners and customers,” said Bob Wambach, vice president of product portfolio at Dynatrace.
“Closer collaboration between security and development teams is essential to ensure that software is not promoted early in the pipeline until everyone is sure it is secure. Automated quality and safety checks are a great way to remove manual work in this process, supporting the left turn mentality.
“The best way to do this is to converge observability and security data onto a unified platform, to uncover the full context behind incidents and use this information to drive automated pipelines. These capabilities are crucial to meeting NIS2 requirements, avoiding barriers to doing business in Europe and increasing customer confidence around the world.
