Compliance Advisory
Compliance Advisory
Regulatory compliance and issues related to Risk Management are increasingly relevant for companies and organizations. Thanks to dedicated teams and professionals, Secursat helps identify the best operational solutions to implement in response to new needs, ensuring Business Continuity.
The goal is to support the evolution of physical security processes and beyond, towards new themes of digitalization, innovation, sustainability, and data protection, as required by the market and regulations such as the NIS2 Directive and the DORA Regulation.
Definition of actions, services, timelines, and costs to address regulatory issues, thanks to experience, expertise, and skills.
The regulatory context
The European cybersecurity scenario, which this year is primarily shaped by the NIS2 Directive and the DORA Regulation in the financial sector, aims to align the efforts of Member States and businesses toward increasingly effective digital operational resilience.
The NIS2 Directive, implemented by Legislative Decree 138/2024, and the directly applicable DORA Regulation impose stringent obligations for proper management of cybersecurity risk on a large number of companies in critical sectors of the country.
What are the differences between the NIS2 Directive and the DORA Regulation?
NIS2
The NIS 2 Directive replaced the previous NIS Directive by introducing for the Member States the novelty of the size criterion in determining the entities to be included in its scope of application. The conversion decree adopted by the national legislator is already having an effect on Italian companies.
Among the addressees are numerous sectors considered critical to the Union's socio-economic framework, including digital service providers and managed security service providers.
The main requirements that the standard introduces to identify and mitigate risks and threats, and to ensure a high level of digital security, find concrete operational responses in the preparation and implementation of policies for risk analysis and information system security, incident management, business continuity, supply chain security, and protection of physical assets.
DORA
The DORA Regulation - lex specialis with respect to NIS2 - directly addresses financial entities, including banks, investment companies, insurance and reinsurance companies, and other entities, including strict obligations on the supply chains of each.
The aim is to harmonise risk management across the EU for financial sector entities, ensuring high security standards and improving the operational resilience of the entire sector. It will be the financial entities that will have to take specific security measures to prevent non-compliance and avoid administrative sanctions and possible criminal liability.
Leggi altre News
Crisi delle materie prime, impatto sui costi e sulle organizzazioni
Rischi e Scenari
Il rincaro e la crisi delle materie prime, che sta interessando tutti i settori, impattano sulla crescita e sullo sviluppo di molte aziende e soprattutto PMI che rappresentano il tessuto produttivo del modello Italia. ...
Il SOC per una gestione intelligente anche dei sistemi antincendio
Consulting
Le evoluzioni normative della UNI 9795:2021Proteggere in maniera intelligente aziende ed organizzazioni con strumenti di monitoraggio e di gestione remota dei rischi, integrando security e safety, ad oggi è possibile.I ...