In view of the increasing discussion about cyber attacks on IT and OT environments, the need for stricter legal requirements for companies and organizations, especially in critical sectors, is being discussed in public. NIS2 will replace the existing EU cyber security law, the 2016 Directive on the Security of Network and Information Systems.
According to NIS2, organizations in various sectors should ensure that the networks and systems they use to provide services and carry out their activities achieve a higher level of cyber security.
Insufficient prescription
Kay Ernst from OT security provider OTORIO explains: “Regulations like NIS2 are an important step, but they are insufficient on their own. Above all, critical infrastructures and industrial manufacturing companies must protect their central operating systems and processes. That means they need to be proactive in addressing cyber risk and making sure every second of every day is running smoothly. Identifying, prioritizing and mitigating business-critical cyber risks is an imperative, but the journey to operational security is a process, not a one-time event. It requires comprehensive visibility into assets and processes, automated risk assessment, and the specific skills of security professionals to proactively manage digital risk with clear, practical guidance.”
More at Otorio.com
About OTORIO OTORIO is an OT (Operational Technology) security company providing end-to-end solutions for proactive digital risk management. These help industrial companies around the world to maintain business continuity and protect ongoing operations. OTORIO provides comprehensive security risk assessment, monitoring and management solutions and services for critical infrastructure, intelligent transportation and logistics systems and industrial manufacturing companies.