A new EU cybersecurity law is on the horizon, and Irish businesses need to be prepared. The Network and Information Security Directive, known as NIS2, will soon be in effect, requiring compliance from organizations or facing hefty fines. With the deadline approaching in October 2024, it’s crucial for businesses to assess if they fall under the directive and if they are ready for it.
David Curtin, CEO of .ie, expressed concerns about the readiness of Irish entities for NIS2. While NIS1 only impacted around 100 companies in Ireland, NIS2 will affect approximately 3,000 entities, according to the NCSC. The scope of NIS2 is broader, covering 15 sectors compared to NIS1’s seven, with stricter enforcement and harsh penalties for non-compliance.
To navigate the challenges posed by the new legislation, organizations are advised to conduct a thorough audit of their systems, assess risk management strategies, and ensure their supply chains are compliant. Top management involvement is crucial in preparing for NIS2, and conducting an incident response simulation can help businesses be better equipped for any cybersecurity threats.
As the deadline approaches, it’s essential for Irish businesses to take proactive steps to comply with NIS2 and avoid potential fines. Stay informed and prepared for the upcoming changes to cybersecurity regulations in the EU.