Here we give you the highlights, explain who to talk to and how to open up the right conversations with the right contacts to help your customers stay compliant and competitive, and support your business growth.
What are NIS2 and DORA?
NIS2 and DORA are two new acts from the EU that aim to raise cybersecurity and digital operational resilience standards across the continent.
Let's look at each one in turn:
Network & Information Security Directive
This is the second version of the directive, expanding its scope
Requires operators of critical infrastructure and essential services across the EU to adhere to specific cybersecurity and data protection standards
Focuses on risk management, data security, and incident reporting
EU member states have until October 17th 2024 to transpose NIS2 into their national laws
Fines for non-compliance could be up to €10 million
Digital Operational Resilience Act
Aims to improve digital operational resilience in the financial services industry across the EU
Focuses on risk management, incident reporting, resilience testing, and more
Comes into force on January 17th 2025
UK entities may need to comply with DORA’s requirements to trade in the EU
Who do you target for NIS2 and DORA compliance solutions?
The list of sectors covered by NIS2 and DORA is long and exhaustive, but if you’ve got customers or prospects in these sectors, we recommend talking to them about compliance:
NIS2 affects all entities that provide essential or important services to the European economy and society, including companies and suppliers. Critical infrastructure and important services.
Any financial services entity, including banks, insurance, payments, ICT, asset management, and crypto.
The wide scope of NIS2 and DORA means that it will affect a range of roles across your customers’ organisations.
Board directors
Overall responsibility for security policies, compliance, cybersecurity training, and more
Cybersecurity team
Implements security policies, processes, and controls. Handles incident management
Risk management team
Designs policies to minimise cyber risk. Also in charge of business continuity
Compliance team
Ensures the organisation meets reporting obligations
HR
Provides cybersecurity training and promotes a culture of continuous learning
IT team
Responsible for implementing NIS2’s ten minimum measures
Board directors
Overall responsibility for risk management strategies. Personally liable if something goes wrong
CISO
Provides overall ICT framework, including risk management strategies and policies
DPO
Oversees data protection strategy and implementation
ICT and Risk Management
Responsible for governance in digital operational risk
Legal
Ensures compliance with DORA’s regulations
Third-party ICT providers
Must ensure their systems and services comply with DORA
You now know what NIS2 and DORA are and who they matter to. It’s time to find out how you can help your customers navigate this challenging terrain.
How do we help you support your customers?
Exclusive Networks and Thales are on a mission to help you support your customers as they achieve their necessary NIS2 and DORA compliance.
Firstly, we’ve got the best portfolio of tools available so your customers can work towards NIS2 and DORA with confidence:
Application
Security
Protect applications and APIs at scale, whether in the cloud, on-premise or hybrid.
Data
Security
Identify data risks wherever they exist in your organisation, control access without holding back productivity.
Cryptography
& Encryption
Manage encryption keys across your network from a central location. No hardware needed.
Our tools directly help your customers comply with NIS2 and DORA regulations. For example, NIS2 explicitly mandates essential and important entities define and implement cryptography and data encryption policies. Trust Exclusive Networks and Thales to cover that base - and more.
We’ve also got other resources to help you learn more about NIS2 and DORA and how you can make supporting your customers’ transition your competitive advantage.
Blogs
We’ve put together two blogs - one for NIS2 and one for DORA - with much more information on the new act, including a deeper dive into the technology that smooths the path to compliance.
You can find them here...
Panel Discussion
Listen now! Hear our experts share everything you need to know about NIS2 and DORA compliance including:
- The essential requirements, dates and details
- The personas in organisations that need to be aware of NIS2 and DORA
- How to start conversations with those personas
- The tech that helps you and your customers attain NIS2 and DORA compliance
- How achieving NIS2 and DORA compliance can create a competitive advantage for your customers (and you)
Meet The Panel...
If you’re interested in learning more about NIS2, DORA, and the challenges your customers face as they work towards compliance, this is a great way to get started.
Battlecards
Finally, we’ve created a set of battlecards to help you and your team open conversations with the personas that will be working on NIS2 and DORA compliance in your end customers.
You can download them here...
Looking for expert support and guidance to help your customers hit their NIS2 and DORA targets?
It’s time to talk to Exclusive Networks.
We’ve got everything you need to seize those opportunities and help make compliance a competitive advantage.
