This pocket guide is an introduction to the EU’s NIS Directive (Directive on security of network and information systems). It outlines the key requirements, details which digital service providers are within scope, and explains how the security objectives from ENISA’s Technical Guidelines and international standards can help DSPs achieve compliance. This pocket guide is a primer for any DSP that needs to comply with the NIS Directive. The pocket guide helps DSPs: Gain insight into the NIS Directive and who is regulating it; Identify if they are within the scope of the Directive; Understand the key requirements; and Understand how guidance from international standards and ENISA can help them comply. Your essential guide to understanding the EU’s NIS Directive – buy this book today and get the help and guidance you need.

• Cover
• Title
• Copyright
• Contents
• Introduction
  • Background
  • Guidance
  • Key definitions
• Chapter 1: Scope and applicability
  • Online marketplaces
• Chapter 2: Authorities and bodies
  • Competent authorities
  • CSIRTs
  • Single points of contact
  • Cooperation Group
  • Powers and penalties
• Chapter 3: Complying with the Directive
  • Minimum security measures
  • Appropriate to the risk
  • Technical and organisational measures
  • Mandatory incident notification
  • International standards
• Chapter 4: Implementing cyber resilience
  • ISO 27001 and ISO 27002
  • Standards for Cloud services
  • ISO 22301
  • ISO 27035
  • Combining standards
• Appendix: Mapping of ENISA’s Technical Guidelines and ISO 27001 Annex A
• Further reading