RSA Resources / Reports

Buyer’s Guide for CISOs: Achieving NIS2 Compliance

NIS2 applies to a wider range of organizations compared to the original NIS Directive.
NIS2 now includes energy providers, waste management, wastewater, postal services,
public transport operators, and additional infrastructure and services. There is also a ‘size’ component to NIS2. An organization may need to comply with the directive depending on its annual revenue or the size of its team. Third-party suppliers are also impacted as they will need to comply if they wish to maintain business relationships with identified entities that must meet NIS2 requirements. Familiarize yourself with the specific requirements applicable to your sector.

The CISO’s (Chief Information Security Officer’s) job of balancing business growth objectives and compliance requirements has always been delicate, and the pending European Union Network and Information Systems 2 (NIS2) compliance requirement will further stress that dynamic.

This EU directive imposes stricter cybersecurity requirements on businesses across various sectors and comes into effect October 17, 2024. CISOs must ensure their organizations comply with the relevant regulations and meet all applicable EU and member-state requirements.

This guide aims to help CISOs navigate NIS2 compliance and meet the requirement’s identity security measures. Apart from accelerating compliance, prioritizing identity security will help CISOs prepare for the most frequent and highest-impact attacks.

Start a free trial

Cloud IAM (C1)

Hybrid auth (E1)

Hybrid IAM (E2)

Hybrid IAM (E3)

Entra ID Enhanced (M1)