NIS 1 & 2 compliance support .

The Network and Information Systems (NIS) Regulations 2018, known as NIS 1, are the UK’s implementation of the EU’s original NIS Directive. Compliance with the UK NIS standard involves implementing appropriate security measures to protect network and information systems and reporting significant incidents to the relevant authorities.

Key features of NIS 1 in the UK include:

• Scope: Applies primarily to operators of essential services (OES) and relevant digital service providers (RDSPs).
• Incident reporting: Mandatory reporting of significant incidents within 72 hours to the designated competent authority.
• Security requirements: OES and RDSPs must implement adequate technical and organisational measures to manage risks to the security of their network and information systems.

We will help you navigate the requirements of the NIS Regulations by conducting a thorough assessment of your cyber security practices, assisting with the implementation of necessary controls, and ensuring that your incident management processes are aligned with UK standards.

The NIS 2 Directive, which replaces the original NIS Directive in the EU, expands the scope and strengthens the requirements for cyber security across the European Union. This new directive aims to address the evolving threat landscape and increase the resilience of critical infrastructure sectors.

Key differences and features of NIS 2 in the EU include:

• Expanded scope: NIS 2 covers a broader range of sectors, including public administration, space, manufacturing of critical products, and more, alongside traditional critical sectors like energy, transport, and healthcare.
• Stricter incident reporting: NIS 2 introduces a two-step reporting process: an initial notification within 24 hours of becoming aware of a significant incident, followed by a more detailed report within 72 hours.
• Higher security requirements: NIS 2 mandates stricter cyber security measures, including enhanced risk management, supply chain security, and incident response protocols.
• Stronger penalties: NIS 2 introduces higher fines and more severe penalties for non-compliance, reflecting the increased importance of cyber security in the EU.
• Supply chain security: There is a greater focus on the security of supply chains and third-party vendors.

We will support your organisation in achieving compliance with the European NIS 2 standard by helping you understand the specific requirements for your sector and region, implementing necessary cyber security measures, and ensuring your incident response plans meet these enhanced regulatory expectations.