The NIS2 Directive

Staff Awareness Digital Learning Course - EU's NIS2 regulation explained

Course Overview

In an increasingly connected world, cybersecurity has become a major issue for businesses and institutions.

Digital threats are evolving rapidly and becoming more complex, making robust protection measures essential.

To address these challenges, the European Union has adopted the NIS2 (Network and Information Security 2) directive, strengthening security requirements for networks and information systems. This directive imposes new obligations on organizations to better protect critical infrastructures from cyberattacks.

To remain competitive and efficient, critical sectors and public institutions must embrace new operating models alongside cyber resilience.

Cyber resilience refers to the ability to protect electronic data and systems from cyberattacks, as well as to resume business operations quickly in case of a successful attack.

The NIS2 Directive and Its Implications

The NIS2 directive, adopted in December 2020, follows the first NIS directive (2016).

It aims to harmonize and strengthen cybersecurity measures within EU member states.

The main implications of NIS2 are:

  • Expansion of Scope: The NIS2 directive includes a greater number of critical sectors, such as healthcare, transportation, financial services, energy, and more.
  • Enhanced Security Requirements: Companies must adopt appropriate technical and organizational measures to manage security risks, prevent and minimize the impact of incidents.
  • Notification Obligations: Organizations must report significant incidents to the competent authorities within strict deadlines.
  • Increased Responsibility of Executives: Company leadership is directly responsible for compliance with security requirements.
  • Strengthened Sanctions: More severe penalties are provided for non-compliance, potentially leading to substantial fines.

 

Learning Objectives

Course curriculum :
More than 8 hours of HD videos, case studies and quizzes

  • Introduction to cybersecurity and digital operational resilience
  • Cyber Resilience & Incident Management
  • Articulate the appropriate communication strategy
  • Designing and Executing a Mitigation Strategy
  • The NIS2 Directive
    • Why NIS2
    • Which critical sectors and entities will be affected
    • The fundamentals, the pillars and the potential sanctions under the NIS2 Directive
    • How to prepare and be compliant
    • The specific case of the financial sector : DORA and NIS2