Victor Tong’s Post

🚀 NIS and NIS2 RCSA sample templates 🚀 GRC Library just completed a test on the NIS and NIS2 directives, with risk item deduplication and role name standardization. 🔍 **Key Highlights:** - **NIS Directive** (EU) 2016/1148 - **NIS 2 Directive** (EU) 2022/2555 For those interested in a closer look at the processing results, here are the links to the sample templates 🔗 [NIS Directive Sample Template](https://lnkd.in/exnfxaHS)  🔗 [NIS 2 Directive Sample Template](https://lnkd.in/eRuSpi-y) #NIS #NIS2 #RiskManagement #Compliance #Regulatory #CyberSecurity #DataProtection

Did you know that the NIS2 law in Denmark is expected to come into force on July 1, 2025?⚖️ Our in-house attorney and NIS2 expert Jakob Krabbe Sørensen has given his point of view on the news: "If it's not postponed a third time, the Danish implementation of NIS2 will end up being more than eight months late. The good thing about this is that it buys valuable time for Danish companies - many of which are lagging behind in implementing NIS2 and putting it into operation. These companies would never have made it for October 18, which was actually the deadline. This also means that we can hope that between the time the bill is passed and the time it comes into force, the authorities will give some guidance that can shed light on important questions that are still unanswered. Questions about resource-heavy obligations like supply chain security and incident management. This will allow more companies to get it right the first time and not waste resources on legal uncertainty and excessive compliance, as we’ve seen in some areas during the early years of GDPR." If you have any questions for Jakob or just want our help to get started on your NIS2 compliance, you're more than welcome to reach out👇 https://lnkd.in/egBrNZZy #nis2 #nis2directive #cybersecurity #compliance

🚨 The NIS2 law is coming to Belgium soon! 🚨 Transposing EU Directive 2022/2555, the new law requires concerned entities to notify significant incidents to the national CSIRT (the CCB). 🔍 Key Notification Timeframes: ▪️ Early Warning: within 24 hours ▪️ Incident Notification: within 72 hours ▪️ Final Report: 1 month after the incident notification ▪️ Additional intermediate and progress reports may be requested. Does your organization have an incident response plan in place? Take a look at our CyberFundamentals (CyFun(R)) Framework and get prepared! 👉 Check out the NIS2 incident notification framework : https://obi41.nl/3rch38u4 👉 Access policy templates from CCB : https://obi41.nl/bdz99dy6 Don’t wait until the 18th of October, start preparing for NIS2 now! #NIS2 #CyberSecurity #IncidentResponse #Belgium #CCB

Feel free to contact us about the NIS2 regulations and Siemens Hopital solutions. #laboratoire #pharmacie #hopital #healthcare #smartbuilding #digital #santé #techniques #GTC #DigitalTransformation #technieken #BMS #laboratorium #apotheek #ziekenhuis #zorgsector #zorginstelling #hospitalofthefuture

Incident notification: useful aspects to remember!

🌍 Today marks a pivotal moment as Europe advances its cyber resilience with the NIS2 Directive. 🛡️ NIS2 introduces strict cybersecurity governance, risk management and reporting obligations, which will directly affect over 4,000 Irish organisations across 18 sectors. 🗓️ 17 October 2024 is the deadline for EU member states to transpose the NIS2 Directive into national law. 💡 As Ireland, and other EU member states look set to miss this deadline, stay updated on key developments from EY - https://lnkd.in/gbEiEtPk Robert Haniver Puneet Kukreja #EY #EU #Cybersecurity #data #privacy #NIS2 #NIS2Compliance #technology

📊 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝘁𝗮𝗿𝘁𝘀 𝘄𝗶𝘁𝗵 𝗟𝗶𝗺𝗶𝘁𝗶𝗻𝗴 𝗔𝗰𝗰𝗲𝘀𝘀 Why does the Principle of Least Privilege (PoLP) matter for defense contractors? It’s a key control under CMMC 2.0, designed to protect sensitive data and reduce compliance risk. Discover best practices in our latest blog and YouTube video! 🎥Check out our video lesson: https://cstu.io/f2d1c4 📆Schedule time with an expert: https://cstu.io/8bede8 #Compliance #DefenseIndustry #PoLP #Cybersecurity

📊 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝘁𝗮𝗿𝘁𝘀 𝘄𝗶𝘁𝗵 𝗟𝗶𝗺𝗶𝘁𝗶𝗻𝗴 𝗔𝗰𝗰𝗲𝘀𝘀 Why does the Principle of Least Privilege (PoLP) matter for defense contractors? It’s a key control under CMMC 2.0, designed to protect sensitive data and reduce compliance risk. Discover best practices in our latest blog and YouTube video! 🎥Check out our video lesson: https://cstu.io/f2d1c4 📆Schedule time with an expert: https://cstu.io/8bede8 #Compliance #DefenseIndustry #PoLP #Cybersecurity

⏰ 17-10-2024 ⏰ "With the NIS2 Directive set to be transposed into national law by October 17, 2024, applicable organizations must take steps to prepare for compliance. These include: 1. Determine if they fall under NIS2’s scope and which units are impacted. 2. Evaluate security measures, amend security policies and plan for NIS2 compliance. 3. Incorporate new security measures and incident reporting obligations in supply chain. Start early to avoid delays." https://lnkd.in/dcKR5R2e

🚨 NIS 2: The Final Countdown Begins Today! 🚨 Today marks the last day for countries to transpose the NIS 2 directive into national law. 🚨 Five countries have already started drafting legislation to align with these crucial cybersecurity and safety standards. But what does this mean in practice? Starting tomorrow, organizations across the EU will need to take serious action to comply with NIS 2. Here's how to get started in 3 key steps: 🔍 Step 1: Identify if you're a significant or essential entity. Does your organization operate in a high-risk sector, making you a potential target for hackers? 📊 Step 2: If yes, it's time for a full security audit. Understand your current cybersecurity posture and receive the training needed to ensure a smooth transition. ⚙️ Step 3: Get hands-on by implementing ISO 27001 and the right frameworks for your industry, ensuring compliance and strengthening your defenses. The clock is ticking! ⏰ It’s time to take control and secure your digital assets for the future. But you are not alone in this migration and the SPAC Alliance have prepared workshops to help you better understand what is at stake during the Expoprotection, Salon de la Prévention et Gestion des Risques event 🛡️ Register here to get access to the workshops 👉 https://lnkd.in/epmm622r #NIS2 #Cybersecurity #ISO27001 #Compliance #DigitalSecurity #CriticalInfrastructure #CyberResilience #SPACAlliance