A Call to European Markets: New Sectors Affected by NIS2 Directive

Date: 2024-08-01
Author: Versasec

NIS2 Directive is a legislative framework introduced by the European Union to enhance cybersecurity across member states. It stands for the Network and Information Systems Directive 2, which builds upon the original NIS Directive that was adopted in 2016.

Key aspects of the NIS2 Directive include:

Broader Scope: NIS2 expands the list of sectors and types of organizations that need to comply with the regulations. This includes both public and private entities in sectors such as energy, transport, banking, healthcare, water supply, digital infrastructure, and more.

Stronger Security Requirements: The directive sets out stricter cybersecurity risk management measures and reporting obligations for organizations. This includes implementing appropriate and proportionate technical and organizational measures to manage risks posed to the security of network and information systems.

Incident Reporting: There are more detailed requirements for incident reporting. Organizations must report significant incidents to relevant national authorities without undue delay.

NIS2 Directive aims to improve the overall level of cybersecurity in the EU, ensuring a high common level of cybersecurity across member states and increasing resilience against cyber threats.

A Customer’s Experience

At Versasec, we recently onboarded a new customer in the manufacturing industry. With the NIS 2 Directive coming into effect in September 2025 and the threat of losing significant business due to attacks, they decided to strengthen their authentication when accessing a number of control systems.

Operating with Microsoft Entra ID environment, and YubiKeys, they decided to implement best credential management practices. Further, they chose Versasec as their preferred credential management system vendor to integrate for automatic issuance seamlessly.

Versasec’s experience with Microsoft and Yubico allowed them to smoothly deploy the MFA hardware-based authenticators to their manufacturing locations and privileged users.

Time Constraint to Cybersecure
With the date for the NIS2 Directive closing fast, time was key with this deployment. Additionally, a competitor’s loss of business was published in the news. The team at Versasec listened and understood the customer’s priorities. They were able to successfully launch and roll out MFA authenticators to their entire workforce within two months.