The NIS2 Directive (Network and Information Security Directive) is a legislative framework from the European Union aimed at strengthening cybersecurity requirements for critical infrastructures and essential services in Europe. In response to evolving cyber threats, it broadens its scope to more sectors and mandates stricter protective measures:
“The requirements of the European directive invite many entities to build a solid roadmap to deploy and strengthen their cyber defense capabilities, aiming for a structurally safer operation, increased trust with their stakeholders, and greater competitiveness for companies.”
Access to network resources is not granted based on user location or network affiliation but on their identity, device, and ability to meet defined access policies.
The network is divided into unique and isolated segments, called micro-segments. Each micro-segment is a distinct security zone with its own access policies, allowing for precise control of network resources and reducing the attack surface in case of a breach.
While traditional cybersecurity solutions focus on securing networks and systems, SDP focuses on securing assets from an identity-centered perspective, using an overlay network architecture. Resources are effectively invisible to unauthorized users and devices.
Chimere can support your compliance with the NIS 2 directive by securing access to critical systems. This security is achieved through strict identity-based control and the principle of least privilege. Chimere continuously verifies each connection, limiting access to sensitive resources and mitigating risks from internal and external threats.
Our vision of Zero-Trust Network Access
Blog - How to Begin Implementing Zero Trust?
In conclusion, ZTNA limits access to specific applications based on user identity and context, while VPN creates a secure connection granting access to the organization's entire private network.
Chimere is a partner of Qorum Secur'Num, a one-stop shop for cybersecurity and digital compliance. With over 450 cybersecurity experts across more than 50 sites in France, Qorum Secur'Num can support you in all areas of your compliance efforts with the NIS 2 directive.
| Article | Description | Skills |
|---|---|---|
| 21.2.a | Policies related to risk analysis and information system security | |
| 21.2.b | Incident management | |
| 21.2.c | Business continuity, such as backup management and recovery, and crisis management | |
| 21.2.d | Supply chain security, including security aspects regarding relationships between each entity and its direct suppliers or service providers | |
| 21.2.e | Security of network and information system acquisition, development, and maintenance, including vulnerability processing and disclosure | |
| 21.2.f | Policies and procedures to assess the effectiveness of cybersecurity risk management measures | |
| 21.2.g | Basic cyber hygiene practices and cybersecurity training | |
| 21.2.h | Policies and procedures regarding the use of cryptography and, if applicable, encryption | |
| 21.2.i | Human resource security, access control policies, and asset management | |
| 21.2.j | The use of multi-factor or continuous authentication solutions, secure voice, video, and text communications, and secure emergency communication systems within the entity, as needed |