Description
The NIS-2 Directive pertains to safeguarding the security of Vital Digital Infrastructures, which are crucial for sustaining society. These infrastructures encompass various industries such as healthcare, power generation and transmission, and with importance to e-IRG research and education. Specifically for research e-Infrastructures and in particular NRENs, the NIS-2 Directive mandates that government agencies in the domain of Digital Infrastructures (e.g. those providing TLD management, DNS and Cloud computing service and Data centre services, and Trust services) should adhere to its requirements, meaning that most e-Infrastructures in the research domain fall under its purview.
The obligations set forth by the NIS-2 Directive are generally reasonable and expected as part of regular work, but it is crucial to document and demonstrate compliance. The NIS-2 Directive also requires regular audits of compliance, making it imperative for e-Infrastructures to be well-prepared. To this end, some essential steps e-Infrastructures can take include establishing contacts with their national government, appointing a coordinator for compliance and reporting, evaluating their current security baseline status, identifying their obligations under the NIS-2 Directive, and comprehending the necessary measures to bring their organization up to the required level.
