NIS2 & CRA: Europe's Response to Cyber Shenanigans
summary
NIS2 widens coverage from 30 → 67 sectors, forces member states to transpose the directive by October 17 and imposes 24h / 72h / 30d reporting (early warning, update, final or interim report). Essential entities face fines up to €10M or 2% turnover, important ones up to €7M or 1.4%. CRA targets any product with digital elements, requires lifecycle security and free updates, uses self‑assessment or third‑party conformity for critical classes, and levies fines up to €15M or 2.5% turnover. ISO 27001 already covers about 70% of NIS2.
AI-written summary · about
chapters (9)
- 0:00NIS2 & CRA introduction
- 2:32NIS1 to NIS2 changes
- 10:06NIS2 scope expansion
- 18:04NIS2 sectors & classification
- 25:16NIS2 compliance steps
- 37:48CRA introduction
- 42:28CRA scope & categories
- 47:25Preparing for CRA compliance
- 51:19Q&A
related talks
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
11mThe Day the EU Broke My Build: NIS2 for Developers
22mThe New IT Security Law NIS2 - Are You Affected and What Do You Need to Do?
42mHow NIS2 Redefines Monitoring and Incident Response Workflows
15mEuropean Cybersecurity Regulations who's who
01h 12mSecuring cyber critical infrastructure.
33mCompliance and NIS2
30mThe EU's Cybersecurity Resilience Act (CRA) has Begun – How Can Manufacturers Confidently Addres ...