New NIS2 Cybersecurity Law: Expert Dave Maasland Explains the Impact on Organizations

It will be an important year for cybersecurity. A new law is in the making that will oblige thousands of organizations to take measures against digital attacks. Expert Dave Maasland explains what the new legislation means.

The law, called NIS2, will make control and compliance in the field of digital security stricter from October 2024. According to cybersecurity expert Dave Maasland, this could well be the largest cybersecurity legislation ever.

Cyber ​​attacks in war

Cyber ​​attacks and their impact are increasing, says Maasland. “If you look at what is happening in the world, it has an impact on the digital world. Think of what we see happening between Israel and Hamas, but also the attacks between Russia and Ukraine,” he says. Digital attacks are used in both wars.

“Cyber ​​attacks seem to be getting better and more advanced,” says Maasland. “They will also have an impact on other parts of the world, not just in conflict areas.”

also look at

• Israel uses AI to determine which targets to attack in Gaza: ‘You dehumanize the opponent’

‘Unhinged world’

The criminals carrying out the attacks also appear to be getting tougher, says Maasland. “In the past, ransomware distribution groups had rules, such as not attacking hospitals and trying to stay away from vital infrastructure. But they have increasingly loosened those rules.”

“We see that the criminals who carry out the attacks sometimes report them to the supervisor themselves, in order to stay out of harm’s way. That’s how brutal they have become. And also that children’s hospitals are being attacked. That world seems increasingly out of control.”

Election manipulation

People are concerned about the security of the digital world, Maasland notes. “You also see that people are very concerned about major events next year and their digital security.”

“Think of elections and major sporting events in combination with the rise of artificial intelligence, fake news and disinformation. For example, people are extremely afraid of election manipulation.”

also look at

• How a cyber attack in Ukraine could cause a massive power outage in the Netherlands

‘We don’t have much time’

Organization and countries must therefore properly arm themselves against the increasing attacks, Maasland believes. “You can do a lot yourself to ensure that you respond instead of waiting.”

Maasland’s biggest concern is whether countries will get their approach in order quickly enough. “I don’t think we have much time,” he says.

Strict new law

The new NIS2 law divides companies into two categories, says Maasland: important and essential. The essential companies receive supervision in advance to check whether everything is in order in terms of digital security. And if there is an incident, they also receive supervision afterwards. At an important company there is only retrospective supervision.

The law even goes so far that the boss of an organization can be removed from his or her position in the event of an incident, says Maasland. “So that’s how seriously the threat to vital infrastructure is taken.”

also look at

• video

  Cybersecurity expert ‘surprised’ by Israeli spy software at AIVD: ‘They should be able to develop them themselves’

Huge wave of measures

“Ultimately everyone has to deal with the law,” says Maasland. “Everything is connected. The NIS2 puts a lot of emphasis on securing the chain, the suppliers, things like that.”

“And you will see that large organizations that have to comply with this legislation will impose stricter requirements and regulations on their suppliers. So this is a huge wave, coming at us from the top down.”

To ask? Ask them!

Do you have any questions or would you like to respond? Send us a message here in our chat.

2024-01-01 08:33:39
#stricter #law #cybersecurity #year #deal