Prepare for NIS2 Compliance

• Risk analysis and information system security policies.
• Incident handling (prevention, detection, response).
• Business continuity and crisis management.
• Supply chain security.
• Security in network and information systems.
• Cybersecurity risk-management measures.
• Cyber hygiene practices and cybersecurity training.
• The use of cryptography and encryption.
• HR security, access control and asset management.
• The use of multi-factor authentication.

The NIS2 directive establishes a foundational set of requirements to augment cybersecurity and safeguard essential information infrastructure, but it doesn’t provide explicit guidelines on specific actions or methodologies. Many member states and industry sectors are integrating internationally acclaimed standards and best practices when formulating their national legislation. These universally recognized standards — like NIST CSF, ISO 27001/27002, CIS Controls — can act as useful guides for local authorities to comply with the NIS2 directive.