Cybersecurity and the NIS directive: the European Union faces a challenge of consistency

Cybersecurity in Europe, an opportunity to seize today!

The NIS Directive was adopted in August 2016. This directive lays the foundations for a European cybersecurity framework. It emphasises the need for countries to secure their own infrastructures and to function consistently across the continent. In order to achieve such consistency, each country should harmonise their security approaches and practices. This will prevent large pan-European companies from operating in a fragmented regulatory environment, which would otherwise render their compliance efforts useless.

The regulations on personal data protection highlight that the directive is a prerequisite for meeting subsequent European regulation, which will be more significant. In order to make the NIS directive successful, it is necessary to ensure consistency among security principles at a European level. More detailed information on this topic can be found in our paper. Our Risk Insight letter concludes with thoughts about a new security model to comprehensively tackle 2020, our view on incident detection, Hong Kong regulatory developments and a proposition for the security of self-driving cars.