These two groups of organisations will be required to take organisational and technical measures to protect against cyber threats to networks and information systems, and there will be reporting requirements following incidents. UK digital operators and service providers should start preparing now for the recently-adopted Network and Information Security (NIS) directive, irrespective of Brexit, according to Nic Scott of security firm Code42. NIS, the first EU-wide legislation to target a "more unified approach to cyber security," seeks to make reporting cyber attacks an obligation. The directive will require companies that provide services or products in cyberspace to report any incidents involving their systems within 24 hours if they are "likely to result in significant damage.
UK digital operators and service providers should start preparing now for the recently-adopted Network and Information Security (NIS) directive, irrespective of Brexit, according to Nic Scott of security firm Code42. NIS, the first EU-wide legislation to target a "more unified approach to cyber security," seeks to make reporting cyber attacks an obligation. The directive will require companies that provide services or products in cyberspace to report any incidents involving their systems within 24 hours if they are "likely to result in significant damage.