Compliance Advisory
Compliance Advisory
Regulatory compliance and issues related to Risk Management are increasingly relevant for companies and organizations. Thanks to dedicated teams and professionals, Secursat helps identify the best operational solutions to implement in response to new needs, ensuring Business Continuity.
The goal is to support the evolution of physical security processes and beyond, towards new themes of digitalization, innovation, sustainability, and data protection, as required by the market and regulations such as the NIS2 Directive and the DORA Regulation.
Definition of actions, services, timelines, and costs to address regulatory issues, thanks to experience, expertise, and skills.
The regulatory context
The European cybersecurity scenario, which this year is primarily shaped by the NIS2 Directive and the DORA Regulation in the financial sector, aims to align the efforts of Member States and businesses toward increasingly effective digital operational resilience.
The NIS2 Directive, implemented by Legislative Decree 138/2024, and the directly applicable DORA Regulation impose stringent obligations for proper management of cybersecurity risk on a large number of companies in critical sectors of the country.
What are the differences between the NIS2 Directive and the DORA Regulation?
NIS2
The NIS 2 Directive replaced the previous NIS Directive by introducing for the Member States the novelty of the size criterion in determining the entities to be included in its scope of application. The conversion decree adopted by the national legislator is already having an effect on Italian companies.
Among the addressees are numerous sectors considered critical to the Union's socio-economic framework, including digital service providers and managed security service providers.
The main requirements that the standard introduces to identify and mitigate risks and threats, and to ensure a high level of digital security, find concrete operational responses in the preparation and implementation of policies for risk analysis and information system security, incident management, business continuity, supply chain security, and protection of physical assets.
DORA
The DORA Regulation - lex specialis with respect to NIS2 - directly addresses financial entities, including banks, investment companies, insurance and reinsurance companies, and other entities, including strict obligations on the supply chains of each.
The aim is to harmonise risk management across the EU for financial sector entities, ensuring high security standards and improving the operational resilience of the entire sector. It will be the financial entities that will have to take specific security measures to prevent non-compliance and avoid administrative sanctions and possible criminal liability.
Leggi altre News
