{"id":13072,"date":"2024-10-10T09:04:38","date_gmt":"2024-10-10T09:04:38","guid":{"rendered":"https:\/\/www.cyber40.it\/cyber-4-0s-nis-2-white-paper-in-collaboration-with-tim-enterprise-is-online\/"},"modified":"2025-05-15T19:52:41","modified_gmt":"2025-05-15T19:52:41","slug":"cyber-4-0s-nis-2-white-paper-in-collaboration-with-tim-enterprise-is-online","status":"publish","type":"post","link":"https:\/\/www.cyber40.it\/en\/cyber-4-0s-nis-2-white-paper-in-collaboration-with-tim-enterprise-is-online\/","title":{"rendered":"Cyber 4.0’s NIS 2 white paper in collaboration with Tim Enterprise is online"},"content":{"rendered":"\n

Scope<\/strong><\/p>\n\n

DL No. 138, which implements Directive (EU) 2022\/2555, known as NIS 2 (Network and Information Security Directive 2), was officially published in the Official Gazette on Oct. 1<\/strong>\/10\/2024 and will come into force on Oct. 16, 2024<\/strong>. <\/p>\n\n

The main purpose of the Standard is to strengthen the cyber resilience and security of networks and information systems in the European Union. It aims to create a high and uniform level of cybersecurity in all member states. <\/p>\n\n

There are several changes from the previous Directive (NIS of 2016), as NIS2 introduces more stringent requirements, expands the scope to more sectors and organizations (including SMEs), and provides stricter penalties for non-compliance than the previous Directive.<\/p>\n\n

The white paper, jointly produced by the Cyber 4.0 Competence Center and TIM Enterprise, provides an overview of the Directive, highlighting the practical implications for Italian companies, with a focus on SMEs.<\/p>\n\n

To whom it will be applied<\/strong><\/p>\n\n

NIS2 applies to two main categories of organizations: “Essential” and “Important”: Essential organizations are those operating in sectors considered critical, such as energy, transportation, health care, and digital infrastructure. Important organizations operate in sectors considered critical but not essential, such as manufacturing, waste management, and postal services. Organizations that must comply have been identified with thresholds related to the number of employees and annual turnover, regardless of whether they are public or private. Member states may include smaller businesses if they play a key role in the local economy. <\/p>\n\n

Scope of application<\/strong><\/p>\n\n

The Directive requires organizations to adopt a risk management approach to cybersecurity by implementing specific organizational, technical and operational measures, these include:<\/p>\n\n