🧑‍💼 NIS2 & ENISA | Episode 5 | NIS2 Series | Security | Avit | ENG

In this educational video, we will be discussing the NIS2 directive and its implications for companies in the European Union. NIS2 not only imposes measures but also requires companies to report, follow up, and resolve incidents. This includes reporting significant incidents within 24 hours and conducting a detailed assessment within 72 hours. A post-mortem, including the measures taken, must be completed within one month after the incident. Additionally, NIS2 may make the use of certain products, services, and processes mandatory. A certification scheme for these products, services, and processes will be introduced by ENISA. Companies falling under NIS2 will be registered with ENISA. There will also be the option for voluntary participation in an intel/threat sharing platform. The NIS2 directive was published by the EU in December 2022 and will become Dutch law in July 2024. It is essential to begin taking the appropriate steps to prepare for NIS2, given the extent and impact of the mandatory measures.