The aim of the NIS 2 directive is to make companies and services in the European Union more resilient to cyber attacks. NIS 2 or also called NIB 2 ( network and information security directive ) designates 16 sectors with essential and important activities.
This directive evolved from the first version, NIS 1, which involved fewer sectors. NIS 1 still required explicit designation by the competent authority, this explicit designation is now dropped.
If you fall within the defined criteria, by definition you should comply with this directive here . Organisations (companies, institutions...) in these sectors face a duty of care to better secure their ICT systems as well as a duty to report serious incidents. Failure to comply can result in serious penalties.

Everyone will have experienced a cyber-attack, one should assume the it will just happen, however, one does not know when "it's not IF but WHEN it happens". Applying a structured methodology helps enormously to identify the various risks and to link the correct measures to them!

In a world where cyber security is becoming increasingly important globally, where European legislation (e.g. NIS 2 or NIB 2) is not sitting still, it is advisable to have your management system (also called management system) in order in a demonstrable, neutrally determined way (through audits). This usually looks like a complex and arduous task.
However provided correct guidance, pragmatism, this exercise is really not too bad.

The NIS2 or NIB legislation allows you to demonstrably prove compliance by applying recognised standards such as ISO 27001 or other management systems such as NIST, CIS controls, IEC 62443 ....

Provided a little extra effort, you can also add 27701, the data protection standard, which is a valuable addition in the European GDPR context.

How does this work?

Through four simple steps
1. Maturity measurement: after a thorough analysis of your current situation, you will receive a detailed report of the necessary steps to take to operate in compliance with ISO27001.
2. Implementation: based on the initial maturity measurement, a plan is developed and monitored to get to the desired level. You play a central role here
3. Certification audit (optional)
4. Follow-up:

Provided a little extra effort, you can also add 27701, the data protection standard, which is a valuable addition in the European GDPR context.

We support you in various ways, ranging from coaching to possibly tooling (a few hours per week).

It is obviously important to have sufficient knowledge yourself to be able to apply the necessary cyber-hygiene.
Even with guidance from experts, YOU need to take control of cyber security yourself to keep your business or organisation safe.

So it's important to get regular refresher courses, training or education.

Our experts deliver this training, and each has years of experience, which means they are passionate about giving you the training you need in the various fields of cyber security, cloud security and GDPR.