AME2023 session - NIS 2 0 - Why the new EU directive will be relevant for every organization - TonyK

Names as "Slammer", "Blaster" and "NIMDA" might vaguely ring a bell... They are far less known than the recent "WannaCry", "Log4J" or "Petya" attacks. Yet Slammer, Blaster and NIMDA where the attacks which woke up the IT industry in 2004 - we really needed better security. It was the start of a cat and mouse game. Fast forward to today where a complete industry has risen around gaining access, data exfiltration and services all the way up to “Ransomware as a Service”.
For the European Commission, this was a strong motivation to review the current NIS (Network & Information Security) directive and bring the cyberresilience of organizations-in-EU-countries to a higher level with the new version, NIS 2.0.
NIS 2.0 becomes effective by September 2024 and can enforce penalties for business or C-level individuals if directives are not met. Think about incidentmanagement, risk control, network security, encryption, reporting, auditing, etc. etc.
Join this session by Tony Krijnen (Microsoft) to learn about the current directives, the differences with NIS 2.0, the requirements of organizations which are subject to NIS 2.0 and mostly: why really EVERY organization should have NIS 2.0 on their radar.