The Network and Information Systems Security Directive (NIS 2 Directive for short) aims to improve cyber security in various sectors such as energy, transport, health and digital infrastructure. It places higher security requirements on companies, addresses supply chain security and holds di e managers accountable for breaches.
In addition to the critical sectors previously covered by the first NIS Directive (energy, transport, water, health, digital infrastructure and finance), providers of public electronic communication services and digital services, social media operators, manufacturers of critical products (e.g. medical devices) as well as postal and courier services must now also review and, if necessary, adapt their IT security measures. In addition, individual regulations also affect domain registrars as well as manufacturers of certain IT products requiring certification.
The risk management measures to be taken by the companies and operators concerned include the following:
The directive came into force in January 2023; the member states must now transpose the regulations into national law by October 17, 2024. A corresponding draft bill by the Federal Ministry of the Interior and Home Affairs was published in a revised version on June 24, 2024, but has yet to be adopted and promulgated.
SKW Schwarz is ideally positioned to support companies in the implementation of the security requirements and the corresponding measures. Our expertise spans the entire breadth of the challenges posed by the new law. Our consulting services include:
