This pocket guide is a primer for any OES (operators of essential services) that needs to comply with the NIS Regulations, and explores who they are, and why the NIS Regulations are different for them. An introduction to the new NIS Regulations 2018 that bring the EU’s NIS Directive and Implementing Regulation into UK law. This guide outlines the requirements for operators of essential services based on the Cyber Assessment Framework established by the National Cyber Security Centre (NCSC), including an explanation of the objectives, principles and indicators of good practice, and offers implementation guidance. This guide will help you: Understand how to comply with NIS Regulations, and avoid penalties associated with non-compliance Unravel the key definitions, authorities and points of contact Learn the benefits of a good Cyber Resilience plan Interpret and ensure compliance with the Cyber Assessment Framework Establish the NCSC’s cyber security objectives, principles and indicators of good practice Your essential guide to understanding the NIS Regulations – buy this book today and get the help and guidance you need.

• Cover
• Title
• Copyright
• Contents
• Introduction
  • Background
  • A note on Brexit
  • Guidance
  • Key definitions
• Chapter 1: Scope and applicability
  • Digital service providers
• Chapter 2: Authorities and bodies
  • Competent authorities
  • CSIRTs
  • Single points of contact
  • Cooperation Group
  • Powers and penalties
• Chapter 3: Complying with the Directive
  • Cyber security objectives
  • Principles
  • Cyber Assessment Framework
  • Notifications
• Chapter 4: Implementing cyber resilience
  • ISO 27001 and ISO 27002
  • ISO 22301
  • ISO 27035
  • Combining standards
• Appendix: OES Definitions and Thresholds
• Further reading