How can my business get started with NIS2?

In many companies, the biggest challenge is not the actual implementation of new security measures. The challenge lies primarily in creating an organization that anchors the responsibility for cyber security with management. Often the task is placed in the IT department or with the head of security. A successful implementation of NIS2 begins and ends with management and executive management.

Here are some preparations you can start right now in your company - even if the specific legislation and regulations are not yet ready. Here you can see an estimated timeline for the process.

1. Anchoring and organizing the work

• Establish an interdisciplinary steering committee that is anchored in the executive board and has representatives from all relevant disciplines - e.g. IT, security, risk management, legal, compliance, procurement/contracts, etc.

2. Analysis of situation and needs

• The company's approach to cyber and IT security - e.g. strategy, risk assessments, frameworks, processes, reporting, documentation, etc.
• The gap between current measures and future requirements
• Overview of the organization's current digital setup and requirements for subcontractors
• Identification of customers who will also be covered by NIS2

3. Recommendations

• Prepare a report with concrete recommendations on how to strengthen cybersecurity both internally and externally.

4. Roadmap

• Decision on and implementation of efforts and measures that can be implemented until the entry into force of NIS2 on October 18, 2024.

Source: Revision & Regnskabsvæsen no. 4/2023

Want to know more about NIS2?

Learn more about the new legislation on these pages.

You are also welcome to contact us for a no-obligation meeting about what NIS2 could mean for your business and how your organization can prepare.

• What is NIS2 and why is it being introduced?
• What requirements does NIS2 place on businesses?
• Who is covered by NIS2?
• When should we be ready for NIS2?
• How does my business get started with NIS2?
• Article: NIS2 focuses on management responsibility for cybersecurity