NIS-2 is coming: New requirements for corporate cybersecurity management - ERP Spain.com - España y América Latina

The NIS 2 Directive, effective since January 16, 2023, aims to bolster cybersecurity in the EU's key industries. Member states must implement it by October 17, 2024. It applies to specific entities in crucial sectors, categorized as essential or important, with shared requirements but varying supervisory measures and penalties. Cybersecurity mandates cover risk analysis, information system security, incident handling, business continuity, supply chain security, network and information systems acquisition, basic cyber hygiene, cybersecurity training, cryptography use, human resources security, access control policies, and asset management. Non-compliance may result in substantial fines, up to €10 million or 2% of annual turnover for essential entities, and up to €7 million or 1.4% for important entities. Companies should assess obligations, monitor national adoption, follow cybersecurity authorities' guidance, and fortify measures to manage cybersecurity risks. As a cybersecurity vendor, Kaspersky leverages all of its expertise to help organizations build robust cyber defenses and be compliant with NIS 2. We can support you with our leading solutions and services.