NIS2
EU directive aimed at raising the bar for information and cyber security
The second EU Network and Information Systems Directive, or NIS2 for short, is similar to the GDPR in a way that it is another EU directive aimed at raising the bar for information and cyber security. While the GDPR focused primarily on the protection of personal data, NIS2 focuses on higher critical and important sector cybersecurity standards. Like the GDPR, the NIS2 directive applies to both the public and private sectors. This directive establishes certain requirements for information and cyber security management and implementation, which all companies and organisations that fall under the critical and important subjects list must adhere to.
Lithuania has been among the first EU countries to update its cybersecurity law according to the Directive and organisations are actively implementing the specific requirements set out in the updated Cybersecurity Law of the Republic of Lithuania.
How NIS2 is different from NIS1?
Compared to NIS1, the scope of companies to which the new version of the directive will apply is significantly expanded. In addition to expanding the critical sectors, important sectors are also added. The application of the directive to these areas will differ in that organisations in critical sectors will have to provide ongoing proof of their cyber security status, while those in important sectors will only be checked in the event of an incident.
- Critical sector organisations: 250 employees, annual turnover of 50 million euros.
- Important organisations: 50 employees, annual turnover of 10 million euros.
These criteria may vary depending on the sector. An organisation can be considered critical regardless of its size if it is the sole provider of a critical service. This will also affect some companies indirectly, as they will be service providers (third parties) to these companies, and their attention to cybersecurity will also need to be verified.
7 important entities according to NIS2
We can help you with
Our focus: cybersecurity solutions, consulting, and other services
Other services
Our customer stories
CISO services for the ROIX crowdfunding platform
Cyprus: National CSIRT establishment
ENISA: The development of a cybersecurity crisis maturity assessment model
Enhancing internal fraud prevention for Šiaulių Bankas
Natrix and CyberSet deployed for CSIRTMalta
Natrix threat monitoring platform for Egypt's financial sector
Assessment of the level of cybersecurity governance, and the security of the critical national infrastructure in Serbia
Assessment of the cybersecurity ecosystem in Bosnia and Herzegovina
