The EU NIS2 Directive according to SANS Faculty

Member state legislation derived from the new European Network and Information Security Directive (NIS2) is set to come into force by October 17, 2024. The new directive sets stricter security requirements for a larger group of companies and introduces more enforcement requirements with higher fines. In addition, leadership teams will be held accountable for a company’s cybersecurity efforts. But what does this actually mean for organisations conducting business in the European Union? What should you know about this upcoming directive and is there cause for concern?

As with many of these kind of regulations, they tend to trigger a lot of questions across all the various communities and aspects of cyber security. This eBook aims to help answer some of those questions across communities. We sat down with several of our SANS Faculty and experts to get their perspective on NIS2 and how it affects their specific area of expertise. Whether you are a security leader, digital forensics expert, SOC leader, ICS/OT Systems Engineer, or other role, this eBook aims to give you answers to some of the questions you may have about NIS2.

This eBook will help you with some of the following points on NIS2:

• Understanding NIS2 Compliance: Gain in-depth knowledge of the expanded scope and stricter requirements of the NIS2 Directive, including the new sectors and entities it covers, and how to ensure your organization meets these standards.
• Corporate Accountability and Leadership: Learn how to elevate cybersecurity to the boardroom level, ensuring that your leadership team is fully aware of their responsibilities and equipped with the knowledge to oversee and implement effective cybersecurity measures.
• Effective Incident Reporting: Master the rigorous reporting obligations under NIS2, including how to promptly report incidents and threats, prepare detailed follow-up reports, and avoid substantial fines through proper compliance.
• Comprehensive Risk Management Strategies: Discover best practices for implementing a robust risk management framework, covering key areas such as backup policies, multi-factor authentication, supply chain security, and incident handling, to enhance your organization’s resilience against cyber threats.

If you’re looking to better understand this new EU NIS2 Directive, this eBook will help you along that path. Download the eBook by filling out this form.