Webinar: Meeting NIS 2 Requirements with ISO 27001

Prepare for NIS 2 compliance: what your organisation needs to know

The NIS 2 Directive (Network and Information Systems Directive) aims to significantly enhance cyber security across Europe, especially in sectors providing critical services. The deadline for the Directive to be enacted into national legislation in each EU member state is 17 October 2024. Organisations in sectors such as energy, transport, healthcare and digital infrastructure, among others, must comply or face substantial penalties, including fines of up to €10 million or 2% of global turnover.

NIS 2 expands upon the original NIS Directive, broadening its scope to cover more industries and introducing stricter requirements for risk management, incident reporting and supply chain security.

This webinar focuses on how ISO 27001, the international standard for information security management, can help organisations meet these new NIS 2 requirements and ensure compliance.

Agenda

  • What is NIS 2 and who does it affect?
    Understand the scope of the NIS 2 Directive and which sectors are impacted.
  • How to comply with NIS 2
    Learn about the key compliance steps, including risk management and reporting obligations.
  • How ISO 27001 helps with NIS 2 compliance
    Discover how the ISO 27001 framework supports the security controls and risk management processes needed for NIS 2 compliance.
  • Risk assessment requirements
    Get a clear understanding of the risk assessment needs for both NIS 2 and ISO 27001, and how to integrate them.
  • Scoping, sectors and enforcement
    Find out the specific sectors covered by NIS 2 and what enforcement looks like for non-compliance.

With the 17 October 2024 deadline for NIS 2 compliance, infrastructure and critical service organisations across Europe must act now to avoid penalties and ensure they meet the Directive's requirements. This webinar will provide crucial insights into:

  • Who is affected by NIS 2 and why it’s essential to comply.
  • Practical steps your organisation needs to take to meet NIS 2 requirements.
  • How ISO 27001 can streamline your compliance efforts, focusing on risk management and incident response.
  • Best practices for securing your organisation and supply chain.

Delivered by

Andrew Pattison

Andrew Pattison
Head of GRC Consultancy Europe

Andrew is a distinguished consultant with more than two decades of experience, including pivotal roles such as information security manager for a specialist telehealth supplier.

A member of ISACA®, BCS and CSA, Andrew’s expertise spans information security, change management, business continuity and project management. His qualifications include an MSc in Information Systems Management, Certificate in Information Security Management Principles (CISMP), Certified Information Security Lead Implementer (CIS LI), Certified Information Security Lead Auditor (CIS LA) and PRINCE2® Project Management.

PROTECT YOUR
BUSINESS
THIS WINTER