NIS2 Compliance with Dragos
Dragos helps organisations exceed NIS2 Directive compliance with comprehensive OT cybersecurity solutions.
The NIS2 Directive is modernised EU-wide cybersecurity legislation that expands requirements beyond the original NIS Directive. EU member states must transpose it into national law by October 17, 2024, with NIS2 compliance required from October 18, 2024.
NIS2 compliance applies to Essential Entities (energy, transportation, banking, healthcare, water utilities) and Important Entities (digital providers, postal services, waste management, food, chemicals, manufacturing) meeting specific size and operational thresholds.
Dragos provides Industrial Cyber Risk Management (ICRM) frameworks, comprehensive OT cybersecurity assessments, and tabletop exercises specifically designed for industrial control systems to meet NIS2 Directive Article 18(a) requirements.
Organisations must report significant incidents to national authorities within 24 hours of detection and submit final reports within 30 days. Dragos helps establish proper incident handling and reporting mechanisms for NIS2 compliance.
Penalties for not complying with the NIS2 Directive include fines up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Personal liability may apply to senior management of Essential Entities for failing to meet NIS2 compliance.
The standards are written in a technology-neutral form, so most requirements apply to emerging technologies. Joint teams (JT-62443-3-1, JT-62443-1-6, JT-62443-07) assess IIoT, cloud integration, AI, and regulatory developments like European NIS2 and CRA to identify when new or modified requirements are needed for future versions.
Yes, non-EU organisations providing critical services within the EU or serving as suppliers to EU-based critical infrastructure providers must also comply with NIS2 standards.
Organisations can begin their NIS2 compliance journey with a comprehensive OT Cybersecurity Assessment (OTCA) to identify current maturity levels. Then, they can implement the Dragos Platform for visibility and rapid threat detection, supported by professional services and ongoing managed security support to fully achieve NIS2 Directive compliance.
