{"id":1822,"date":"2024-12-05T12:05:51","date_gmt":"2024-12-05T11:05:51","guid":{"rendered":"https:\/\/cyberoperations.hu\/?p=1822"},"modified":"2025-05-05T14:57:24","modified_gmt":"2025-05-05T12:57:24","slug":"51-tipp-amivel-biztonsagossa-teheted-az-online-jelenleted","status":"publish","type":"post","link":"https:\/\/cyberoperations.hu\/en\/51-tipp-amivel-biztonsagossa-teheted-az-online-jelenleted\/","title":{"rendered":"NIS2 \u2013 What every business leader needs to know about the EU\u2019s new cybersecurity regulations"},"content":{"rendered":"

The European Union's new cybersecurity regulation, the NIS2 Directive<\/strong> (Network and Information Security Directive 2), entered into force on October 18, 2024, and all member states \u2013 including Hungary \u2013 are required to transpose it into their domestic legal order by October 17, 2025. The goal is clear: provide stronger protection for the European economy against digital threats<\/strong>.<\/p>\n

Why is NIS2 important?<\/strong><\/h3>\n

The previous NIS Directive already laid the foundations for cybersecurity for critical infrastructures, but since then the threats have become much more complex. NIS2 not only expands the scope of organizations affected, but also stricter safety requirements, stronger regulatory controls and higher fines<\/strong> also introduces.<\/p>\n

Who is affected by NIS2?<\/strong><\/h3>\n

The NIS2 Directive is basic<\/strong> and important<\/strong> It targets organisations from all sectors, regardless of size and legal form, if they meet specific criteria.<\/p>\n

Basic sectors:<\/strong><\/h4>\n
    \n
  • \n

    Energy (electricity, oil, natural gas)<\/p>\n<\/li>\n

  • \n

    Transport (air, rail, road, water)<\/p>\n<\/li>\n

  • \n

    Banking and financial services<\/p>\n<\/li>\n

  • \n

    Healthcare<\/p>\n<\/li>\n

  • \n

    Drinking water and wastewater treatment<\/p>\n<\/li>\n

  • \n

    Digital infrastructures (e.g. cloud providers, DNS providers)<\/p>\n<\/li>\n

  • \n

    Government agencies<\/p>\n<\/li>\n

  • \n

    Space exploration<\/p>\n<\/li>\n<\/ul>\n

    Important sectors:<\/strong><\/h4>\n
      \n
    • \n

      Manufacturing industry (e.g. pharmaceuticals, mechanical engineering, chemical industry)<\/p>\n<\/li>\n

    • \n

      Food industry<\/p>\n<\/li>\n

    • \n

      Postal and courier services<\/p>\n<\/li>\n

    • \n

      Digital service providers (e.g. online marketplaces, search engines)<\/p>\n<\/li>\n

    • \n

      Waste management<\/p>\n<\/li>\n<\/ul>\n

      What are the obligations?<\/strong><\/h3>\n

      Based on NIS2, the organizations concerned they must implement appropriate technical and organizational measures<\/strong>, including:<\/p>\n

      \u2705 Risk assessment and management
      \u2705 Incident management and reporting obligation
      \u2705 Network and information security policies
      \u2705 Access management and authorization control
      \u2705 Cybersecurity training for employees
      \u2705 Supply chain risk management
      \u2705 Managerial liability \u2013 directors can be held personally liable<\/p>\n

      What happens if you don't meet the requirements?<\/strong><\/h3>\n

      The regulation strict sanctions<\/strong> The businesses concerned:<\/p>\n

        \n
      • \n

        Serious for fines<\/strong> can be expected (up to several million euros),<\/p>\n<\/li>\n

      • \n

        They may lose their contracts (especially with state and international partners),<\/p>\n<\/li>\n

      • \n

        They may suffer irreparable reputational damage,<\/p>\n<\/li>\n

      • \n

        They may be subject to regulatory action and mandatory corrective action.<\/p>\n<\/li>\n<\/ul>\n

        What can you do now? \u2013 Steps to compliance<\/strong><\/h3>\n
          \n
        1. \n

          Identify<\/strong>whether your business is affected by the sectors covered by NIS2.<\/p>\n<\/li>\n

        2. \n

          Start preparing.<\/strong>: conduct an internal audit, evaluate existing security measures.<\/p>\n<\/li>\n

        3. \n

          Develop an action plan<\/strong> for compliance.<\/p>\n<\/li>\n

        4. \n

          Choose a reliable professional partner<\/strong>who supports you throughout the entire process.<\/p>\n<\/li>\n<\/ol>\n

          How does CyberOperations.hu help?<\/strong><\/h3>\n

          \u2705 NIS2 pre-audit<\/strong> \u2013 assessment of the current status
          \u2705 Creating a compliance plan<\/strong> \u2013 customized measures
          \u2705 Professional advice and training<\/strong>
          \u2705 Risk management documentation<\/strong>
          \u2705 Development of an incident reporting and response protocol<\/strong>
          \u2705 Ongoing monitoring and support<\/strong><\/p>\n

          Don't delay your preparation!<\/strong><\/h3>\n
            \n
          1. \n

            October 17th is approaching dangerously. Whoever steps in time, not only suitable<\/strong>, but also gain a competitive advantage in the increasingly strict European regulatory environment.<\/p>\n<\/li>\n<\/ol>\n

            \ud83d\udce9 Contact us today<\/strong>so that together we can make your business's IT system secure and compliant.<\/p>\n

            NIS2 preparation<\/a><\/p><\/blockquote>\n