PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The NIS2 Directive, Explained

bugcrowd.com | blog | #compliance | #cybersecurity-policy | #eu | #nis2 | #critical-infrastructure | #regulation | #eu-regulation | #incident-reporting | #cybersecurity-governance
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An FAQ on the EU NIS2 Directive: which enterprises fall in scope, how essential and important entities differ, and the high-criticality sectors facing stricter cybersecurity rules.
Published
Collected

Related coverage

blog · yeswehack.com
UK publishes proposals for NIS 2-equivalent Cyber Security and Resilience Bill
UK proposals for the Cyber Security and Resilience Bill: wider critical-infrastructure scope, MSPs and data centres included, 24-hour incident reporting, aligning where appropriate with EU NIS 2.
blog · hackerone.com
Network and Information Systems Directive (NIS2) Compliance: What You Need to Know
An overview of the EU NIS2 Directive's expanded scope, risk management obligations, and 24-hour incident reporting, plus how pentesting, VDPs, and bug bounty support compliance efforts.
blog · hackerone.com
NIS2: Next Step Forward on EU Security Requirements
The EU's NIS2 Directive expands cybersecurity obligations for essential and important entities, mandating ten risk-management measures, incident reporting, and coordinated vulnerability disclosure.
blog · aikido.dev
NIS2: Who is affected?
NIS2 covers EU 'essential' and 'important' sectors, with company size thresholds deciding scope. Aikido shares a five-step self-check: sector, sub-industry, size, exceptions, and customer scope.
research · ethiack.com
Everything Financial Institutions Need to Know About the NIS2 Directive
Deep dive on NIS2 for financial institutions: stricter supervision, expanded scope, enhanced incident-reporting duties and mandatory regular risk assessments — and what entities must do to prepare.
blog · bugcrowd.com
New Wave of Legislation Puts Crowdsourced Cybersecurity in the Spotlight
A 2022 wave of US cybersecurity laws—over 250 state bills plus federal mandates requiring 72-hour incident and 24-hour ransomware payment reports to CISA—puts crowdsourced security in the spotlight.
Back