Johan Stronkhorst

🔐 Last Friday marked a significant milestone for #cybersecurity in Belgium with the entry into force of the NIS2 Belgian law (law of 26 April 2024), transposing the European #NIS2Directive (2022/2555). This legislation aims to ensure that security measures are taken by crucial entities (such as energy, digital infrastructures, banking, etc.) to prevent their services from being significantly disrupted. 📌 The most notable changes in this new Directive are as follows: 1️⃣ The scope of NIS2 has been broadened to include more sectors and entities, harmonized through the use of a size cap as a criterion; 2️⃣ The technical, operational, and organizational measures to be taken by entities to ensure the security of the networks and information systems they use have been expanded, and now include the obligation to secure the supply chain; 3️⃣ The members of the management bodies are now more involved and can be held liable if the entity breaches its obligations regarding risk management measures; 4️⃣ Sanctions and the powers of the competent authorities are now harmonized and strengthened. 💶 Sanctions can reach up to €7,000,000 or 1.4% of the total worldwide annual turnover for important entities, and €10,000,000 or 2% of the total worldwide annual turnover for essential entities (not to mention that incidents covered by NIS2 can also constitute data breaches under the GDPR, with specific sanctions). On top of that, competent authorities can temporarily prohibit the exercise of managerial functions. 📞 If you want to learn more about these new legal requirements or need assistance implementing them within your organization, feel free to contact our PwC Legal Belgium team Loïc Delanghe, Peter Decru and Isha Upadhyaya who will be happy to help you! #PwCLegal #BusinessLaw #IP #Cybersecurity #NIS2

11

#NIS2 - a critical #ESG data security legislation comes into effect - do you need help to comply and implement? Our experts at Grant Thornton Belgium can guide you on your journey!

23

📚 Two new publications from #TILT members: ➡ In her paper "European cybersecurity standardisation: a tale of two solitudes in view of Europe’s cyber resilience", Dr. Irene Kamara focuses on how appropriate is the European #Standardisation system to support the goals of the Cyber Resilience Act. She argues that the standards development process must be inclusive and open. https://lnkd.in/ghHvDKYP ➡ Prof. Panos Delimatsis, in his TILEC discussion paper titled "From TikTok to Uber to the Metaverse: Digital Services, Servicification and International Investment Law" discusses trade and investment in digital services in an increasingly polarized international economic order and elaborates what challenges arise for international investment law. https://lnkd.in/giuBR_96

27

ETSI/CEN Workshop on EU Digital Identity Framework Standards 10-12 September 2024 | Sophia Antipolis (France) + online Regulation (EU) 2024/1183 amending Regulation (EU) 910/2014 on electronic identities, authentication and signatures (eIDAS 2) was published in the Official Journal of the European Union this spring 2024. This amendment establishes an ambitious European Digital Identity Framework with digital identity wallets and several new trust services. This will bring about a major transformation of security of the European digital infrastructure facilitating cross-border transactions and supporting seamless access to financial, governmental and commercial services across Europe with a high level of accountability. ETSI and CEN are working together to develop several standards to support this new regulatory framework building on the latest globally recognised standards for website authentication, open identities and mobile-based wallets. The workshop will present the latest status of these standards and aims to include demonstrations from large-scale pilots applying the EU Digital Identity Wallet. #standardization #DigitalIdentity

4

The European Council has adopted two new laws that are part of the legislative “package” on #cybersecurity, namely the so-called “cyber solidarity law” and a specific amendment to the cybersecurity law. The new regulation establishes EU capabilities to make Europe more resilient to #cyberthreats, while strengthening cooperation mechanisms. It establishes, among other things, a “cybersecurity alert system” – a pan-European infrastructure composed of national and cross-border cyber centres across the EU. These are entities tasked with sharing information and tasked with detecting and responding to cyber threats. The new regulation also provides for the creation of a cyber security emergency mechanism to increase preparedness and improve response capacity to incidents in the EU. This mechanism will support: ▪️ preparedness actions, including testing entities in highly critical sectors (healthcare, transport, energy, etc.) for potential vulnerabilities, based on common risk scenarios and methodologies, ▪️ a new EU cybersecurity reserve composed of private sector incident response services ready to intervene at the request of a Member State or EU institutions, bodies and agencies, as well as associated third countries, in the event of a significant or large-scale cybersecurity incident, ▪️ mutual technical assistance. https://lnkd.in/dGJRte7c #sccybersecurity #sccssummit #tprm #supplychainsecurity #cyberrisk #AI #grc #riskmanagement #riskcompliance #duediligence #vendorrisk

7

🌐 𝗗𝗮𝘁𝗮 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻 𝘁𝗵𝗲 𝗰𝗹𝗼𝘂𝗱: 𝗮 𝗺𝗮𝘁𝘁𝗲𝗿 𝗼𝗳 𝗰𝗼𝗺𝗽𝗲𝘁𝗶𝘁𝗶𝘃𝗲𝗻𝗲𝘀𝘀, 𝗳𝗮𝗿 𝗯𝗲𝘆𝗼𝗻𝗱 𝗮 𝘀𝗶𝗺𝗽𝗹𝗲 𝘁𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗶𝘀𝘀𝘂𝗲 As discussions surrounding the European cybersecurity certification system #EUCS intensify, Digital New Deal partners with Mouvement des Entreprises de France to emphasize the crucial importance of protecting the sensitive and strategic data of European companies. To safeguard Europe's digital competitiveness and sovereignty, it is essential that the EUCS addresses the concrete expectations of cloud service users in terms of data confidentiality, while following a harmonized and voluntary approach. This issue has now moved beyond the technical realm; it has become a political matter. We call on the new Commission to send a strong message to our transatlantic partners. As Fabrice Le Saché reminded us yesterday at the event's closing, our autonomy is non-negotiable. It relies on a trusted European certification system. A big thank you to Maxence Demerlé for organizing this day of mobilization at CESES in Brussels, which allowed us to consider the real needs of European cloud service users. Adrien Laroche Alexis Kasbarian Pascal Belmin Henri d'AGRAIN Patrick Laurens-Frings Olivier Sichel Michel Paulin

9

📢 Join us in Brussels for a new 3-day training that will provide you with a comprehensive overview of the main EU rules on #data, #cybersecurity and #AI and 𝐡𝐨𝐰 𝐭𝐡𝐞𝐲 𝐜𝐨𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭 𝐞𝐚𝐜𝐡 𝐨𝐭𝐡𝐞𝐫! https://okt.to/9IGHir The EU is at the forefront of setting the digital governance framework with 𝐝𝐚𝐭𝐚, 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐧𝐝 𝐀𝐈 𝐫𝐞𝐠𝐮𝐥𝐚𝐭𝐢𝐨𝐧 regulation on focus. Multiple binding acts adopted by the European regulators in the recent years aim to regulate the digital space with harmonised rules and standards. ❓Would you like to gain expert insight into these new EU rules and understand the interplay between them? ❓Would you like to learn and exchange views on emerging trends and questions faced by the industry and regulators alike? ➡️ Register here: https://okt.to/UN6FLW

11

1 Comment

📝GRC Infographics 🔒 💻 Information Security 📘 NIS2 Directive and e main ISO standards 📘 DIRECTIVE (EU) 2022/2555 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) ⚖️The NIS2 applies to sectors defined as critical such as: energy, public services, financial services, health services, telecommunications, space, public administration, etc. 📘 The NIS2 Directive is divided in following chapters: ✅ -.Whereas (144) ✅ Chapter I general provisions ✅ Chapter II coordinated cybersecurity frameworks ✅ Chapter III cooperation at union and international level ✅ Chapter IV cybersecurity risk-management measures and reporting obligations ✅Chapter V jurisdiction and registration ✅ Chapter VI information sharing ✅ Chapter VII supervision and enforcement ✅ Chapter VIII delegated and implementing acts ✅ Annex I sectors of high criticality ✅ Annex II other critical sectors ⚙️ How to apply NIS2? A GRC approach based on the main ISO standards (IT services ISO 20000-1, information security ISO 27001, business continuity ISO 22301, risk management ISO 31000, incident management ISO 27035) can help.  #GRC #ICT #NIS #NIS2 #csirt #EU #UE #cybersecurity #resilienza #resilience #ISO200001 #ITServices #ISO27001 #Informationsecurity #ISO22301businesscontinuity #ISO31000 #riskmanagement #ISO27035 #incidentmanagement #finance #banca #publicutilities #servizipubblici #sanità #health #transport #water #wastewater #PA #space

14

📝GRC Infographics 🔒 💻 Information Security 📘 NIS2 Directive and e main ISO standards 📘 DIRECTIVE (EU) 2022/2555 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) ⚖️The NIS2 applies to sectors defined as critical such as: energy, public services, financial services, health services, telecommunications, space, public administration, etc. 📘 The NIS2 Directive is divided in following chapters: ✅ -.Whereas (144) ✅ Chapter I general provisions ✅ Chapter II coordinated cybersecurity frameworks ✅ Chapter III cooperation at union and international level ✅ Chapter IV cybersecurity risk-management measures and reporting obligations ✅Chapter V jurisdiction and registration ✅ Chapter VI information sharing ✅ Chapter VII supervision and enforcement ✅ Chapter VIII delegated and implementing acts ✅ Annex I sectors of high criticality ✅ Annex II other critical sectors ⚙️ How to apply NIS2? A GRC approach based on the main ISO standards (IT services ISO 20000-1, information security ISO 27001, business continuity ISO 22301, risk management ISO 31000, incident management ISO 27035) can help.  #GRC #ICT #NIS #NIS2 #csirt #EU #UE #cybersecurity #resilienza #resilience #ISO200001 #ITServices #ISO27001 #Informationsecurity #ISO22301businesscontinuity #ISO31000 #riskmanagement #ISO27035 #incidentmanagement #finance #banca #publicutilities #servizipubblici #sanità #health #transport #water #wastewater #PA #space

16

📝GRC Infographics 🔒 💻 Information Security 📘 NIS2 Directive and e main ISO standards 📘 DIRECTIVE (EU) 2022/2555 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) ⚖️The NIS2 applies to sectors defined as critical such as: energy, public services, financial services, health services, telecommunications, space, public administration, etc. 📘 The NIS2 Directive is divided in following chapters: ✅ -.Whereas (144) ✅ Chapter I general provisions ✅ Chapter II coordinated cybersecurity frameworks ✅ Chapter III cooperation at union and international level ✅ Chapter IV cybersecurity risk-management measures and reporting obligations ✅Chapter V jurisdiction and registration ✅ Chapter VI information sharing ✅ Chapter VII supervision and enforcement ✅ Chapter VIII delegated and implementing acts ✅ Annex I sectors of high criticality ✅ Annex II other critical sectors ⚙️ How to apply NIS2? A GRC approach based on the main ISO standards (IT services ISO 20000-1, information security ISO 27001, business continuity ISO 22301, risk management ISO 31000, incident management ISO 27035) can help.  #GRC #ICT #NIS #NIS2 #csirt #EU #UE #cybersecurity #resilienza #resilience #ISO200001 #ITServices #ISO27001 #Informationsecurity #ISO22301businesscontinuity #ISO31000 #riskmanagement #ISO27035 #incidentmanagement #finance #banca #publicutilities #servizipubblici #sanità #health #transport #water #wastewater #PA #space

14

Eventful days in Strasbourg, as on the margins of the Cybercrime Convention Committee (#TCY) also our #CyberSEE colleagues organised the first Steering Committee meeting of the project, in the framework of the Launching event. The meeting gathered representatives from the European Commission, the Council of Europe and delegates from Public Prosecution Offices, Ministries of Justice, Police Cybercrime Investigation Units, Financial Investigation Units, Computer Emergency Response Teams and training institutions from all priority countries/areas. Presenting the project’s concept and workplan, while providing a platform for sharing developments and regional priorities for criminal justice actions on cybercrime and electronic evidence was on the agenda. New concepts such as the 𝐒𝐤𝐢𝐥𝐥 𝐒𝐡𝐚𝐫𝐢𝐧𝐠 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐦𝐞, 𝐂𝐲𝐛𝐞𝐫 𝐎𝐥𝐲𝐦𝐩𝐢𝐜𝐬 and 𝐜𝐫𝐢𝐦𝐞 𝐬𝐜𝐞𝐧𝐞 𝐢𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧 𝐰𝐨𝐫𝐤𝐬𝐡𝐨𝐩𝐬 were introduced, along with the project’s objectives. The European Commission emphasised the project's relevance, the significant progress in the region, and their commitment to supporting the future project action. Through CyberSEE, we will continue supporting South-East Europe and Türkiye in addressing the challenges of cybercrime and achieving stronger compliance with the 𝐂𝐨𝐧𝐯𝐞𝐧𝐭𝐢𝐨𝐧 𝐨𝐧 𝐂𝐲𝐛𝐞𝐫𝐜𝐫𝐢𝐦𝐞 (Budapest Convention) through #capacitybuilding actions. Newsroom: https://lnkd.in/dGA85DAk More about our joint EU-CoE CyberSEE project: https://lnkd.in/dW_7J4xd

100

1 Comment

🎫 Join Luigi Gubello of Pitch for OpenSSF Security Insights: Empower Your GovOps at our Open Source in Finance Forum on 26th June in #London 🔗 https://bit.ly/3wwMvRQ Talk Abstract Discover the OpenSSF Security Insights specification, redefining open-source project security standards and compliance through automation and measurement. This specification provides a concise, machine-readable overview of project security, simplifying both human interpretation and automated processing. The specification helps security engineers and developers to have a project overview, standardizes attestation related to policies and licenses, and makes enables measurable information collection for open-source artifacts. This missing capability is essential for anyone creating software for highly regulated industries. Come explore the value of this open specification and the ecosystem that is quickly growing around it. 📆 OSFF Schedule: https://bit.ly/4agvQj7 Event presented by FINOS & The Linux Foundation #OSFF2024 #OSinFinance #opensource #fintech #financialservices #techevent #conference #opensourcecommunity

5

[Trends & Innovations] The 📌 #EU #NIS2 Implementing Regulation (2024/2690) will increase the #cybersecurity level of network and information systems in the European Union. This will have a major impact on affected companies. Find out in this article what the EU NIS2 Implementing Regulation is all about and what it means for operators of essential services (OES), digital service providers (DSP), and their suppliers. #SEEBURGER security expert ⚡️ Frank Stegmüller ⚡️ summarizes almost the most important points for you. 👉https://lnkd.in/e4_qjWmF

5

🇪🇺 Take a look at the latest European Commission report,  "Emerging Digital Technologies in the Public Sector: The Case of Virtual Worlds", with the crucial contribution of our member Nicolas Blanc (CFE-CGC). https://lnkd.in/d48F5tbF 🔵 CEC European Managers’ members are at the forefront of addressing the intertwined challenges of Artificial Intelligence (AI) and leadership. The recommendations in the European Commission's report include a socio-technical approach that addresses the interplay between people, industry, governance, and infrastructure. Regarding the role of leaders and managers, the report recommends producing and disseminating a set of toolboxes to help them with the digital transition. European Commission European Parliament Council of the European Union European Agency for Safety and Health at Work (EU-OSHA) EESC Workers' Group European Economic and Social Committee Eurofound European Labour Authority CES - ETUC SMEunited BusinessEurope Eurocadres #ArtificialIntellifence #UseYourLeadership #Digitalisation #Report #EUCommission #AIAct #Managers #Leaders

6

On 18 October 2024, the Belgian Act of 26 April 2024 establishing a framework for the cybersecurity of networks and information systems of general interest for public security (the NIS2 Act) transposing Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (the NIS2 Directive) will enter into force. In this e-zine, our experts Bastiaan Bruyndonckx, CIPP/E and Françoise Billen will give you more details on this topic. Read it now: 👉 ENG: https://lnkd.in/e_cdaF9M   Please feel free to contact our authors with any specific questions you may have.   To stay updated on the latest legal developments, or to attend one of our next seminars, please click here: https://lnkd.in/egvk8q9c #NIS2 #Directive #ICT #DataProtection

13

🚀 Join us for the ONEKEY Online Seminar on July 18th, 2024, at 11 am! 🚀 The European Cyber Resilience Act (CRA) is now finalized, and the countdown to its full implementation in 3 years has begun! 🕒 🔍 Learn how the CRA will impact product security and incident reporting. 🔍 Understand the mandatory requirements for manufacturers, importers, and distributors. 🔍 Explore the importance of Software Bill of Materials (SBOMs) and comprehensive security analysis. Our expert panel will discuss: 💡 Recent legislative changes 💡 The significance of robust product security processes 💡 An introduction to our COMPLIANCE WIZARD™️ This seminar is crucial for staying ahead of regulatory requirements and enhancing your knowledge of product cybersecurity. 📅 Don’t miss out – mark your calendar and secure your spot today! https://lnkd.in/gVKXVMB5 #CyberResilience #ProductCyberSecurity #ONEKEYSeminar #ONEKEY #CRA

5

🛎️Why is this the perfect timing for publishing an ezine about #NIS2 Directive? 📅 Because we are : 🔏 📌In the middle of the European #Cybersecurity Month (#ECSM) 📌A few days after the Commission announced that #Belgium and Croatia are the sole EU Member States to have fully transposed such #directive #timely 📌A few days before the #entry into #force of the Directive and the Belgian Act --> 18/10 #lydian #cyber #security #cybersecurity #risk #riskmanagement #NIS2

5

1 Comment

🇧🇪 Cybersecurity Risks for the 2024 Elections in Belgium 🇪🇺 As #Belgium gears up for its federal, European, and regional elections on June 9, 2024, the digital landscape poses significant challenges to the democratic process. #Cybersecurity threats are multifaceted and evolving, from #deepfake manipulation and disinformation campaigns to #databreaches and foreign-backed cyber intrusions. 🏛️ The Centre for Cyber Security Belgium outlines these risks and strategic responses in their #CybersecurityStrategy 2021-2025, emphasizing the need for vigilance against #cybercrime, #hacktivism, and #terrorism. As we move closer to election day, understanding these threats and enhancing our defenses is crucial to safeguarding our democratic institutions. Explore how SOCRadar's comprehensive threat intelligence solutions can help protect against these risks and ensure the integrity of the electoral process. 👇 https://lnkd.in/dpTCQJGb #BelgiumElections #ElectionSecurity #ThreatIntelligence #EU2024BE #electionBelgie2024 #Belgium #UseYourVote

8