The NIS 2 Directive is coming
Have you already started to implement the requirements of the new NIS 2 Directive? More companies affected, higher requirements, more effort. That's the directive in a nutshell.
The update will affect significantly more companies. However, this not only includes companies that fall within the direct scope of the directive, but suppliers will also have to invest more effort in risk management. What do your cyber security measures and processes look like? Have your suppliers implemented similar or equivalent security measures? These and many other questions need to be analyzed.
We at TogetherSecure GmbH can look back on many years of consulting experience in the field of information and cyber security. This knowledge and experience is also incorporated into our software solution and knowledge databases. We have already accompanied customers on their way to achieving certification readiness for ISO/IEC 27001 and beyond in maintaining certification. See for yourself in our references.
Why are we talking about ISO/IEC 27001? It is the standard par excellence for a mature information management system. Those who have implemented it will probably not have much more to do. However, we also know that not every company has the resources, in terms of time or money, to implement this comprehensive standard.
Customers who are unable to implement these or similar extensive standards start with simple lists. In our experience, however, these quickly reach their limits. The overview is quickly lost, those responsible do not receive decision-relevant information or the management system operators lose track of what is available, where the weak points are and, above all, how they can be dealt with.
With our HITGuard risk management solution, we therefore offer a tool for setting up a management system quickly and easily, as well as a knowledge database that focuses on the specific requirements of the NIS 2 directive. Of course, it also includes suggestions for treatment measures based on our many years of expertise. HITGuard supports you throughout the entire process of setting up and continuously developing a management system.
HITGuard also supports you in reporting and managing significant security incidents. In addition to documentation, you have the option of analyzing the incidents and defining activities for handling them.
This gives you the opportunity to implement the requirements of the NIS 2 directive cost-effectively and, above all, efficiently. See for yourself and request a free demo from us.
The NIS 2 Directive summarized
The Directive concerning measures for a high common level of cybersecurity across the Union (NIS2 Directive) was adopted by the EU in December 2022. It obliges the European member states to enact corresponding national regulations by October 2024 in order to enforce the directive.
The aim is to raise institutions from key sectors to a common level of cyber security, contain threats to network and information services and ensure continuity in the event of incidents.
Differences to NIS-1
In contrast to NIS-1, the scope of application will be greatly expanded so that many more companies will be affected by the requirements of the directive.
While NIS-1 identified operators of essential services and providers of digital services, NIS-2 distinguishes between essential and important facilities. Sectors are classified into these two categories based on their criticality, company size and annual turnover. The difference between essential and important entities is not in the scope of the requirements, but in the possible consequences of a breach of the requirements.
BRAND NEW
NIS2 catalog from
- Check your NIS2 fitness with the NIS2 catalog from our partner T-Systems
Request a non-binding demo now
Find out what the GRC software HITGuard can do for you