NIS2: Why are firms struggling to comply?
Briefly

The NIS2 Directive's implementation has revealed significant compliance challenges among organizations. ENISA's report identifies six critical sectors lagging in compliance: ICT service management, space, public administrations, maritime, gas, and health. Issues stem from complex and outdated infrastructure, a lack of specific guidance, and insufficient cybersecurity investments. Common challenges include complicated supply chains, limited visibility of sensitive data exchange, and governance control difficulties, particularly in sectors with numerous third-party interactions. The cross-border nature of ICT service management intensifies these compliance struggles, making uniform cybersecurity measures harder to execute.
ENISA found a need to align requirements across borders in each NIS sector, emphasizing that collaboration must be strengthened through community building events and cooperation.
The report identifies six struggling sectors: ICT service management, space, public administrations, maritime, gas, and health, all challenged by outdated infrastructure and insufficient investment.
Common challenges include complex supply chains, limited visibility of data movements, and governance control difficulties as organizations strive to meet NIS2 requirements.
Sectors like ICT service management are particularly affected due to their cross-border nature and the vast number of diverse entities, complicating cybersecurity compliance.
Read at IT Pro
[
|
]