The NIS 2 Directive, which aims to strengthen the cybersecurity of thousands of French public authorities and businesses, comes into force today. The draft bill for its transposition into national law has been presented to the Council of Ministers and will shortly be debated in Parliament. This directive broadens the scope of entities covered, now including around 15,000 organisations in France, and increases the requirements for securing information systems.
Vincent Strubel, Director-General of ANSSI, has announced a three-year period for regulated entities to comply with the new obligations, whilst emphasising the importance of starting immediately. The obligations include carrying out risk assessments, reporting security incidents to ANSSI, strengthening the resilience of IT systems, and promoting a culture of cybersecurity within organisations. Significant financial penalties are envisaged in the event of non-compliance.
Faced with the growing wave of cyber-attacks that potentially threaten the survival of businesses, the introduction of NIS 2 should be seen as an opportunity to strengthen their resilience. Solution providers and software vendors are ready to support organisations through this transition, offering services and technologies to improve their resilience. Thus, whilst 17 October may seem like a symbolic date, it marks the beginning of a new era of vigilance and proactivity in cybersecurity.
Credits : Le Monde Informatique
Leave a Reply