Home > NIS2 certification and compliance
The European NIS2 directive requires many organisations to significantly strengthen their cybersecurity and digital risk governance.
At NETSYSTEM, we support you step by step in your NIS2 audit and compliance, with a tailor-made approach combining cybersecurity, IT risk management, governance and audit.
NIS2 (for Network and Information Security 2) is the new European directive on cyber security, which replaces and strengthens the NIS 1 directive of 2016.
Its objective:
To raise the level of cybersecurity in the European Union, by imposing stricter rules on critical organisations.
The NIS2 directive concerns entities operating in 18 specific sectors of activity, themselves broken down into highly critical and critical sub-sectors. The directive also introduces other criteria, notably that of size, so the first entities concerned are essential and important (more than 50 employees, with a turnover in excess of 10 million euros).
Do you have any doubts about whether or not this applies to you?
Contact us, we’ll help you sort it out.
The entities concerned must:
Note that in the event of non-compliance, the entities concerned may be exposed to financial penalties.
Here’s what needs to be implemented to aim for compliance (the timescales are given as an indication and can obviously vary depending on the organisation’s cyber maturity):
This depends on the organisation’s initial level of maturity. On average, it takes between 6 and 24 months to achieve full compliance.
For example:
Our digital transformation and cybersecurity consultancy will help you achieve NIS2 compliance, fully integrating security issues into your processes. We offer tailor-made support covering :
Emera is a major player in the field of accommodation and services for seniors (nursing homes, EHPAD, senior services residences, etc.) in Europe. At a time of digital transformation in the healthcare and medico-social sector, Emera handles sensitive data (personal, medical, etc.) and relies on critical infrastructures to guarantee continuity of service and the security of its residents.
Faced with the entry into force of the NIS2 directive (Network and Information Systems Directive 2) and the rapid development of cyber threats, Emera wanted to strengthen its regulatory compliance and set up a robust cyber security organisation.
The PASSI qualification is issued by the Agence Nationale de Sécurité des Systèmes d’Information (ANSSI).
It is aimed at trusted service providers who carry out organisational and physical security audits, as well as audits of technical scopes, on their own behalf or on behalf of their customers.
It is a real guarantee of quality and expertise for organisations looking for a cybersecurity consultancy to carry out an audit of their structure.
At Netsystem, we help our customers to do much more than simply comply with the directive.
The NIS2 directive requires a real transformation of the organisation in terms of cybersecurity: governance, risk management, control of suppliers, continuity plans, etc. It's not just a checklist to fill in, it's a structuring approach that needs to be integrated into the company's overall strategy.
That's where our role comes into its own: we work with our customers to build roadmaps tailored to their level of maturity, with concrete, progressive solutions.
The objective is clear: to make them autonomous, resilient and capable of meeting the cyber challenges of today and tomorrow.
Whether you're starting from scratch or are already well advanced, we can adapt. And above all, we move forward together.Vincent FERRARA, Head of Digital Trust practice
No posts found!