Negotiators from the trilogue parties reached a provisional political agreement on the NIS Directive 2.0 on 13 May 2022. MEP Bart Groothuis provided an update on the result of the fourth round of inter-institutional negotiations in an interview with Luca Bertuzzi of Euractiv. As regards the scope of the new Directive, agreement was reached as … Continued
Following an increase of cyberattacks during the coronavirus crisis, the latest cyberattacks – predominantly on Ukranian government and infrastructures – sheds light to a further aspect of the necessity for a high level of cyberresilience. Cyberattacks targeting essential services have the potential to inter alia destroy infrastructure, affect drinking water supply, hamper electricity and telecommunication … Continued
Pascal Steichen, Managing Director of SECURITYMADEIN.LU, has been elected Chair of the Governing Board of the new European Cybersecurity Competence Centre. The Governing Board of the Centre is composed of representatives from the Member States (27 members), the Commission (2 members) and ENISA (1 permanent observer). During the same meeting, the list of National Coordination Centers officially … Continued
On 26 November 2021, the Council of the European Union published a draft compromise proposal for a NIS 2.0 Directive. The document also identifies as main political issues: the scope of the NIS 2.0 proposal, the inclusion of public administration under the scope of NIS 2.0, the exclusion clause of Art. 2(3)(a) NIS 2.0 proposal, … Continued
On 28 May 2021, the German IT Security Act 2.0 entered into force and introduces a number of changes to the existing regulation of critical infrastructures (corresponding to essential services under the NIS Directive) already covered by the BSI Act (Gesetz über das Bundesamt für Sicherheit in der Informationstechnik (BSI-Gesetz)). These changes include: expansion of … Continued
The NIS Directive required Member States to designate competent authorities in the field of network and information security for inter alia monitoring compliance. Further central contact points as liaison offices for supranational cooperation and computer security incident response teams (CSIRTs) had to be designated. The CSIRTs collaborate in the CSIRTs Network “to contribute to developing … Continued