Strengthened cyber security legislation is coming into force in Europe (EU), following the adoption of the Network and Information Security 2 (NIS2) Directive in January 2023. This builds on the EU’s existing NIS directive and requires Member States to enact stricter cyber security regulation backed by tougher enforcement.
NIS2 presents an opportunity for operators of critical industrial infrastructure to assess their capabilities and operations against strengthened cyber security requirements and builds confidence that their partners and suppliers are addressing cyber threats. But for organizations that haven’t upgraded their cyber capabilities, it’s a wake-up call on the need to act to better address cyber security threats to their infrastructure, and to make sure that their operations comply with the NIS2 legislation.