The NIS2 Directive (short for Network and Information Security 2) is a European directive designed to strengthen the level of cybersecurity of organisations considered essential or important to the economy and society. It succeeds the first NIS Directive, adopted in 2016, and significantly broadens its scope in order to better address evolving cyber threats.
In practical terms, NIS2 requires the organisations concerned to implement cybersecurity measures appropriate to their level of risk. This includes vulnerability management, protection of networks and information systems, backups, access management, employee training, as well as the development of business continuity and disaster recovery plans. The objective is simple: to reduce the risk of cyberattacks and ensure business continuity in the event of an incident.
The Directive also introduces new governance requirements. Senior management is now directly responsible for managing cyber risks within the organisation and must ensure that appropriate security measures are effectively implemented. In the event of a major incident, the organisations concerned are required to report it promptly to the competent authorities according to a defined timeline.
In Belgium, the NIS2 Directive has been transposed into national law and applies to several thousand organisations, extending far beyond operators of critical infrastructure. Sectors such as manufacturing, healthcare, transport, energy, digital services and certain industrial companies may fall within its scope.
Is your company ready to comply with the NIS2 Directive ?
Beyond regulatory compliance, NIS2 is also an opportunity to strengthen organisations’ long-term resilience to cyberattacks. By adopting a proactive approach to cybersecurity, organisations can reduce the financial, operational and reputational risks associated with cyber incidents.
This is precisely the approach taken by MCG: supporting organisations in assessing their risks, achieving NIS2 compliance and implementing appropriate solutions, so they can focus on their core business with confidence.