Shiho Hashimoto

Are You An Organisation Based in the EU? You Need To Be Fully NIS2 Compliant In 72 Days Time is running out to comply with NIS2 regulations. Starting your compliance journey sooner rather than later is crucial. See directive requirements below: https://lnkd.in/e3Baxbpp A typical NIS2 compliance process, including security assessments, auditing, consulting, and tool implementation, takes approximately 12 months. Download our NIS2 Mapping Guide – and find out how Seceon can help accelerate your compliance https://lnkd.in/eXY38gyw #seceon #nis2 #compliance #cybersecurity #nis

21

What Are The Penalties If You are In The EU And Not NIS2 Fully Compliant In 71 Days? Penalties for NIS2 Violations The NIS2 Directive sets out specific penalties for non-compliance, these include: Non-monetary remedies Administrative fines Criminal sanctions These penalties can be imposed on essential entities and important entities for infraction such as failure to meet security requirements and failure to report incidents. The specific fines will vary depending on the Member State, but the Directive establishes a minimum list of administrative sanctions for breach of the cybersecurity risk management and reporting obligations. Non-monetary Penalties NIS2 gives national supervisory authorities the authority to enforce non-monetary remedies, including: compliance orders binding instructions security audit implementation orders threat notification orders to entities’ customers. Administrative Fines With regard to administrative fines, the NIS2 directive carefully distinguishes between essential and important entities. For essential entities, it requires Member States to provide a maximum fine level of at least €10,000,000 or 2% of the global annual revenue, whichever is higher. For important entities, NIS2 requires Member States to fine for a maximum of at least €7,000,000 or 1,4% of the global annual revenue, whichever is higher.

4

The NIS2 directive is set to bring new cybersecurity requirements also for small and mid-sized companies across Europe. If your business has over 50 employees or a turnover of more than €10 million, you’re likely in scope. Even smaller companies will need to comply if they’re part of critical supply chains. At WithSecure we are working with partners to provide a solid European alternative for cybersecurity. Our goal is to help businesses meet these new standards. For business leaders, now’s the time to plan and budget for these investments. Get ahead of NIS2 compliance and make sure your organization is ready.

92

2 kommenttia

In his video Mikko Hypponen explains well why cyber security threats from Russia are a wake-up call for companies. But in particular midmarket organizations should be concerned as they face the most significant risk. Here's why: 💡 Limited Resources: Unlike large enterprises, midsized companies often lack the extensive cyber security infrastructure and dedicated teams needed to fend off sophisticated attacks. 💡Valuable Data: Midsized businesses hold valuable data that is often less protected, making them attractive targets for cyber criminals. 💡Shadow IT: Unapproved IT solutions can proliferate in growing businesses, creating unseen vulnerabilities and entry points for attackers. 💡Supply Chain Vulnerabilities: The midmarket often plays a key role in larger supply chains. A breach in a midsized company can cascade up and down the chain, causing widespread disruption. #CyberSecurity #MidsizedBusinesses #CyberThreats

2

Are you striving to align your organization with the NIS2 Directive but feeling overwhelmed? Get ahead with our Guide "5 Steps to NIS2 Alignment”. ➡️ Learn more: https://lnkd.in/e8fVj3pX

2

Since 1st of July 2024 I can see 9 companies being Ransomware victims in Sweden. And Play is the one most active, followed by Meow, RansomHub and with one breach each for Akira and Everest. But the thing that is most interesting is that 4 of these is from the last 30 days. So maybe the attackers holidays are ended? Even more interesting is that ONE of the victims have been hit TWICE - and that is a fairly small, more or less unknown Swedish company in Värmland county! There are 2 fairly large companies among them, the rest are relatively small and unknown. So my conclusion is that the smaller companies arguing that "We are so small so no one would bother to attack us..." is verified as VERY wrong. The criminals don't care if you are small and unknown, they hunt down those who have vulnerabilities... And notable is that since November 2022 there is 52 confirmed Ransomware victims in Sweden, with Play's 10 victims on top. And they are covering all type of industries (sizes, verticals etc). Needless to say - this is not all of them, just the ones that are confirmed...

2

Super excited journey ahead. Next 3 days visiting 3 countries with a packed agenda of technical workshops, Proof of Value day and meetings with CISOs keen to learn about Automated Security Validation. Enjoying the days with Jannis Utz & Anders Enqvist 👍 Food for thought. If you have not read the latest Pentera research report a spoiler information which is rather interesting. Companies implement significant changes in their environment each 3rd month, but still only validate their security once a year on average… 🤔 Time for a change? #pentera #validation #pentest #securityvalidation

54

2 kommenttia

Spyware and surveillance technologies can be used for the good of the people in a lawful and balanced way, but this is not always the case... I give some examples of tools and controversies with them in the blog hosted by KoolSpan below. If you suspect that unlawful spyware and / or surveillance technology is used against you or the organisation you represent - do not hesitate to contact me dirctly for a consultation regarding short- and long-term remedies. We at KoolSpan, Inc. protects the most privacy and security demanding organisations in the world.

12

Proud to have Björn speaking at the Nordic Software Security Summit. He has a firm grip on how to handle the change process needed and how to measure the success of the work to get ready for the CRA. Follow the Nordic Software Security Summit here on LinkedIn to make sure you're up to date. #CRA #EUCRA #CYBERSECURITY

3

𝗚𝗲𝘁 𝗮 𝗖𝗼𝗺𝗽𝗹𝗶𝗺𝗲𝗻𝘁𝗮𝗿𝘆 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗧𝗼𝗱𝗮𝘆! We are currently offering a no-obligation assessment, including 30 days of continuous monitoring against active abuse of privileges and paths to privileges. There are many already taking advantage of Identity Security Insights, and now is your chance to see it in action. With this complimentary assessment, you'll: 🚀 Get up and running in less than an hour 🔎 Gain actionable findings with rich context in 24 hours 🔒 Proactively harden identity security posture Users will uncover and understand all identities, entitlements, configurations, and paths to privileges that attackers could exploit across on-premises, cloud, #SaaS, and IdPs. Learn more in the video below, and request more information today. https://lnkd.in/eVZPqA9M #IdentitySecurityInsights #InsightsAssessment #IdentitySecurity #Cloud

5

Thanks to Identity Week and Tjörvi Einarsson for sharing your thoughts! Physical documents are absolutely foundational for all the newer methods of storing and communicating personal identity, like digital IDs and biometrics-on-a-chip. And congratulations to Iceland for being (I believe) the first adopter of ICAO's new vertical document standard. It's a leap forward in UX for day-to-day use, and a formidable challenge to the next generation of document fraudsters. https://lnkd.in/e3miz2dB

7

🛡️🔒In an era marked by escalating cyber threats, organizations face challenges such as skills shortages, budget constraints, and regulatory demands like the EU's NIS2 directive. Many recent cyberattacks could have been mitigated with proper measures. Our Director of Strategic Programs, @Anna Barkvall, has been featured in the latest Technology Record issue, emphasizing the need for a holistic approach to security, integrating risk management into business operations. She advocates for adopting AI tools like #Microsoft365Copilot to enhance security and meet #NIS2 requirements. 🧐👉Head to pages 64-65 to learn how organizations can navigate challenges and meet regulatory demands effectively: https://ow.ly/M8y350Rju9B #RiskManagement #cybersecurity

3

Are you striving to align your organization with the NIS2 Directive but feeling overwhelmed? Get ahead with our Guide "5 Steps to NIS2 Alignment”. ➡️ Learn more: https://lnkd.in/gb2CEUD5

4

Any interest in how to handle an ongoing ransomware attack in the best way possible? Or even to prevent it? Then you should subscribe and attend this webinar hosted by itm8 Incident Response Team in cooperation with the hostages negotiation specialists from Delta Crisis Management. Based on experience from 100s of cyber security incidents, knowledge and insights are shared on the befores, the doing and the afters. Introducting Michael Sjøberg, Simon B. and Anders Urban 💪🏻

13

Take a look at how you can integrate your data from Recorded Future with Filigran in #OpenCTI. By leveraging #OpenCTI, analysts can automate manual tasks at scale by using automated playbooks to trigger relevant data created by #RecordedFuture. Check out the short demo by Filigran's Jermain Njemanze below! Interested in a #demo or learning more about how you can integrate #RecordedFuture with #OpenCTI? Click the link below! https://lnkd.in/eVAtDkbs #Filigran #RecordedFuture #OpenCTI #integration #partners #threatintelligence

11

1 kommentti

Key takeaways for critical OT environments such as energy, transport, and water management about NIS2: ✅ NIS2 establishes a set of rules and minimum requirements to foster EU wide cooperation and reporting. ✅ NIS2 has evolved from the original NIS Directive, including new OT verticals such as certain manufacturing sectors, and new requirements for increasing accountability and reporting. ✅ Article 21 encourages the use of appropriate measures based on risk, which in the case of critical infrastructures is likely to translate into the application of stricter standards and regulations. ✅ Article 23 requires the prompt reporting of cyberattacks, which will enhance transparency. ✅ Accountability provisions may include fines for businesses and direct responsibility for top company officials. ✅ OT operators should use as guidance enhanced EU vertical standards and guidance such as NCCS for energy and TS 50701 for rail, as well as evolving US regulations. ✅ The strict separation of OT and IT segments simplifies implementation of NIS2 and is consistent with NCCS, TS 50701, and new US regulations. For more information download our complete guide "NIS2 Compliance Guide for OT systems" ➡️ https://bit.ly/45ncZ5a Feel free to message me if you have any questions. #OTsecurity #NIS #ICSsecurity #IEC #NCCS #cyberrisk #cybersecurity #criticalinfrastructure #transportation #oilandgas #powerindustry #wastewater

48

Today’s professionals expect more from the help desk. But high ticket volumes and inefficient workflows prevent IT from delivering the service desk experiences end users want. 💻 Ivanti's new report reveals how companies can leverage automation and user data to transform the #ITSM experience.

2