Understanding the New NIS2 Directive

Jun 24, 2024

Understanding the New NIS2 Directive

Speakers

  • Lucy Kon: Brand Lead for Europe, Middle East, and Africa, Rockwell Automation
  • Maria El: Senior Global Product Manager, Rockwell Automation
  • Andrew Cortiella: Lifecycle Services Commercial Manager for Europe, Middle East, and Africa, Rockwell Automation

Key Topics

  • Introduction to the NIS2 Directive
  • Impact on Cyber Resilience and Incident Response in the EU

Overview of NIS2 Directive

  • Purpose: Improve cyber resilience and incident responses in the EU
  • Reason for Adoption: Significant increase in cyber security incidents, particularly targeting critical infrastructure
  • Regulations: Imposing controls across various industries to enhance overall cyber security

Impact on Manufacturing Sector

  • IT vs. OT Security
    • IT sector: Focus on secure data storage and transaction
    • OT sector: Emphasis on production, avoiding unscheduled downtime, maintaining equipment effectiveness
    • Shift towards connected factories increases cyber security concerns

Consequences of Non-Compliance

  • Fines: Up to EUR 10 million or 2% of annual global revenue
  • Legal Accountability: Management can be held responsible

Compliance Strategies for Manufacturers

  • Assessment: Know your infrastructure and assets
  • Risk Management: Understand and mitigate risks and vulnerabilities
  • Planning: Develop immediate and future plans for cyber security
  • Governance: Establish policies and procedures
  • Training: Educate staff on cyber awareness and best practices

Important Sectors

  • Examples: Life sciences, chemical, food, water sectors
  • Classification: These sectors may be classified as essential or important under NIS2

Urgency and Deadline

  • Compliance Deadline: Mid-October 2024
  • Urgency: Immediate action needed to ensure compliance with the directive

Conclusion

  • Final Thoughts: The NIS2 Directive is crucial for enhancing cyber security measures in the EU, especially as the deadline approaches.
  • Call to Action: Visit RockwellAutomation.com for more information on industrial security.