Some of the most important challenges that organizations are facing in the context of NIS 2 are:
Massively Expanded Scope
While, for instance, in Germany currently about 1,100 to 1,200 organizations (1,870 according to other sources) are in scope of the critical infrastructure law and regulations, it is expected that NIS2 affects 29,500 organizations alone in Germany. In France, the number is expected to grow from 1,000 organizations to at least 6,000 organizations. NIS2 impacts many more industries, but especially also many more organizations, starting with organizations that only have more than 50 employees, depending on revenue, balance sheet sum, and industry.
Incident Handling and Reporting
Proper identification and handling of incidents and subsequent reporting is one of the core areas NIS2 is focusing on. Organizations must be able to detect attacks and other types of security-related incidents, to analyze these, and to report them within a very short period –...