NIS2 for industry
From gap analysis to the measures required by Italian Legislative Decree 138/2024, with the OT perimeter included from day one rather than added at the end.
What the service includes
NIS2 concerns the organisation as a whole. In plants, risk is often concentrated in the industrial network itself, and that is where specific expertise is needed.
- Gap analysis. Comparison of existing measures, including in the OT domain, with the requirements of the decree, with a prioritised remediation plan.
- Security measures. Risk management, access control, segmentation, business continuity and cryptography, applied to the industrial context.
- Incident management. Procedures, roles and tools to detect and report significant incidents within the required deadlines: early warning within 24 hours and notification within 72 hours.
- Supply chain. Security requirements for suppliers and integrators, and control of third-party access.
- Governance. Support for senior management, to whom the law assigns direct responsibility for approving and overseeing the measures.
How we work
The same four-phase method we apply to every project, adapted to this area.
01
Assess
Verification of the scope of application and analysis of the current state across IT and OT.
02
Design
Remediation plan with priorities, responsibilities and timelines, consistent with production constraints.
03
Implement
Implementation of technical and organisational measures and drafting of procedures.
04
Operate
Monitoring, exercises and continuous updating with the support of the SOC.
References
- Directive (EU) 2022/2555 (NIS2)
- D.Lgs. 138/2024
- National Cybersecurity Framework
- ISO/IEC 27001 and IEC 62443 as operational references
Want to know whether NIS2 applies to you?
Tell us about your situation: we will reply with a concrete proposal. You can also call us on 800 035 430.