A key element of the NIS Directive is the obligation to implement appropriate security measures that pay regard to the state of the art. The appropriateness of a specific measure has to be assessed in a risk-based approach, thus, there is no one size fits all approach. With the entry into force of the NIS … Continued
On 13 April 2022, the European Union Agency for Cybersecurity (ENISA) published a report on national coordinated vulnerability disclosure (CVD) policies in the EU Member States. Coordinated vulnerability disclosure is a process by which vulnerabilites finders work together and share information with the relevant stakeholders such as vendors or ICT infrastructure owners. The ENISA report … Continued
Negotiators from the trilogue parties reached a provisional political agreement on the NIS Directive 2.0 on 13 May 2022. MEP Bart Groothuis provided an update on the result of the fourth round of inter-institutional negotiations in an interview with Luca Bertuzzi of Euractiv. As regards the scope of the new Directive, agreement was reached as … Continued
On 10 and 11 May, the NISDUC consortium invited to the first NISDUC conference in Luxembourg. The conference aimed at developing a community of practice around the NIS Directive, sharing knowledge and exchanging practices, as well as gaining some hands-on experience in training sessions. Representing EnCaViBS, Sandra outlined how the implementation of the NIS Directive … Continued
EnCaViBS has two papers accepted at Cyber Science 2022 – International Conference on Cybersecurity, Situational Awareness and Social Media hosted by Cardiff Metropolitan University. The conference takes place from 20 to 21 June 2022. Paula Contreras will present her research on jurisdictional challenges under NIS and NIS 2.0, while Sandra will further elaborate on the … Continued
The Taylor and Francis Prize 2022 of BILETA 2022 has been awarded to EnCaViBS team member Sandra Schmitz for her paper “To Report, or Not to Report, that Is the Question! The Struggle in Determining a Report-Worthy Cyber Incident”, advocating for an extension of reporting obligations in the new NIS 2.0 Directive. All conference participants were … Continued