The NIS2 Directive: Strengthening Cybersecurity Against Cybercrime

Security expert David Clarke explains the key differences between NIS and NIS2

Scope and coverage: The original NIS Directive primarily focused on operators of essential services and digital service providers. NIS2 expands its scope to include medium and large entities from a broader range of sectors, including healthcare, transportation, energy, banking, and government. This means more organizations and government entities are now required to comply with stringent cybersecurity standards.

Security requirements: NIS2 introduces more detailed security requirements. Organizations must implement risk management measures, conduct regular security assessments, and adopt incident response strategies. The Directive mandates the use of encryption and access controls to protect sensitive data.

Incident reporting: The original NIS Directive required entities to report significant incidents without undue delay. NIS2 tightens this requirement, mandating that incidents be reported within 24 hours of detection, ensuring a faster response to attacks and associated disruptions.

Supervision and enforcement: NIS2 strengthens the role of national authorities in supervising and enforcing compliance. Penalties for non-compliance are also more severe, with fines potentially reaching up to €10 million or 2% of the global annual company revenue, whichever is higher.

Supply chain security: NIS2 emphasizes the importance of securing the critical supply chain, requiring companies and governments to assess and manage the cybersecurity risks posed by their suppliers and service providers.

How can Kingston IronKey encrypted solutions help with NIS2 compliance?

To achieve compliance with NIS2 and protect critical sensitive data, organizations need robust security solutions. Kingston IronKey hardware-encrypted USB and SSD solutions offer advanced data protection features that can help companies meet the Directive's requirements for mobile data and air-gapped backups.

Encryption: Kingston IronKey D500S and Keypad 200 drives use military-grade, XTS-AES 256-bit encryption and are FIPS 140-3 Level 3 (pending) certified. This security engineering ensures that, even if a device is lost or stolen, the data remains secure and inaccessible to unauthorized users. The Vault Privacy 80 External SSD can be used for high-capacity data storage up to 8TB and for air-gapping critical data away from attackers on the internet. All IronKey devices use hardware-based encryption, which is significantly more secure than software-based encryption, which can be breached through password attacks.

Access control: IronKey USB and SSD solutions incorporate strong authentication mechanisms, including password and passphrase protections, ensuring that only authorized personnel can access the data. The built-in brute force password attack protections cause a crypto erase if passwords are guessed too many times, thereby ensuring that sensitive data is destroyed before attackers can guess passwords using automated tools.

Data integrity: These devices are designed from the ground up to maintain data integrity, prevent unauthorized alterations, and ensure the reliability of stored information. IronKey drives help compliance with the CIA Triad (Confidentiality, Integrity, Availability) cybersecurity model.

Compliance: By using Kingston IronKey hardware-encrypted solutions, organizations can meet the encryption and access control requirements specified in the NIS2 Directive, reducing the risk of non-compliance and potential fines.

Durability and reliability: IronKey products are designed and built to withstand physical and environmental challenges, ensuring data protection in various operational conditions. Kingston is a trusted provider of hardware-encrypted storage drives, with over 20 years of experience.

In conclusion, as cybercrime reaches unprecedented levels, the introduction of the NIS2 Directive represents a major step in enhancing critical infrastructure cybersecurity across the EU. Organizations must take proactive measures to comply with NIS2 and protect sensitive data. Kingston IronKey hardware-encrypted USB and SSD solutions offer a scalable and reliable means of achieving compliance and safeguarding critical information, helping companies navigate the complexities of today’s cybersecurity landscape.

#KingstonIronKey