Commission Implementing Regulation (EU) 2024/2690 of 17 October 2024
The Commission Implementing Regulation (EU) 2024/2690 of 17 October 2024 sets out the technical and methodological requirements relating to cybersecurity risk management measures to be implemented by the entities to which this Regulation applies.
The European Union Agency for Network and Information Security (ENISA) has published a guide providing technical guidance to help organisations implement the security measures set out in the implementing act.
NIS2 Technical Implementation Guidance | ENISA
Furthermore, the Regulation specifies in detail for the entities concerned the circumstances in which an incident is to be considered significant and must therefore be notified to the competent authority.
The regulation applies to the entities of the sectors and entity types indicated in the table below:
- Securing your organisation
The NISS department ensures that legislation on network and information system security is properly enforced across a range of sectors.
More information -
-