This pocket guide is a primer for any DSPs (digital service providers) that needs to comply with the NIS Regulations, and explores who they are, and why the NIS Regulations are different for them. An introduction to the new NIS Regulations 2018 that bring the EU’s NIS Directive and Implementing Regulation into UK law.   This guide outlines the key requirements, details exactly which digital service providers are within scope, and explains how the security objectives from ENISA’s Technical Guidelines and international standards can help DSPs achieve compliance. This guide will help you: Clarify how to identify if you are within the scope of the NIS Regulations Gain an insight into the NIS Directive Unravel the key definitions, authorities and points of contact Understand the benefits of a good cyber resilience plan Your essential guide to understanding the NIS Regulations – buy this book today and get the help and guidance you need.      

• Cover
• Title
• Copyright
• Contents
• Introduction
  • Background
  • A note on Brexit
  • Guidance
  • Key definitions
• Scope and applicability
  • Online marketplaces
  • Online search engines
  • Cloud computing services
  • Self-identification
  • Some special cases
  • Operators of essential services
• Authorities and bodies
  • Competent authorities
  • CSIRTs
  • Single points of contact
  • Cooperation Group
  • Powers and penalties
• Complying with the Directive
  • Minimum security measures
  • Appropriate to the risk
  • Technical and organisational measures
  • International standards
• Implementing cyber resilience
  • ISO 27001 and ISO 27002
  • Standards for Cloud services
  • ISO 22301
  • ISO 27035
  • Combining standards
• Appendix: Mapping of ENISA’s Technical Guidelines and ISO 27001 Annex A
• Further reading