NIS2 compliance
The NIS2 directive
The NIS2 directive (directive (EU) 2022/2555) is the European Union’s updated cybersecurity law designed to strengthen cyber resilience across member states. It replaces the 2016 NIS directive and expands its scope to cover more sectors, including energy, transport, healthcare, finance, digital infrastructure, public administration, and managed service providers.
NIS2 introduces stricter cybersecurity risk management requirements, mandatory incident reporting within 24 hours, and stronger supply chain security obligations. It also increases management accountability and enforcement powers, with significant fines for non-compliance. Overall, NIS2 aims to harmonize cybersecurity standards across the EU and improve protection against evolving cyber threats.
Holm Security is NIS2 compliant
Holm Security is NIS2 compliant with a systematic and risk-based cyber defence that includes, but is not limited to:
- Implemented ISMS (ISO 27001:2022).
- Additional specific security controls and functions are evaluated continuously.
- Continuous vulnerability assessments according to ENISA's recommendations for vulnerability findings and evidence.