CHAPTER 3: COMPLYING WITH THE DIRECTIVE
As described earlier, the NIS Directive is not a piece of legislation that applies directly to organisations, so speaking of the Directive’s ‘requirements’ is slightly misleading. The Directive does not tell organisations how to operate within the market; rather, it tells the Member States to legislate within a set of parameters – the result for the UK is the NIS Regulations.
For OES in the UK, compliance with the Regulations is through meeting requirements set by the NCSC and relevant competent authorities. The general approach that the NCSC has adopted is in line with practices internationally – which have been developed by adopting recognised best practice – including in line with the Scottish cyber ...
Get Network and Information Systems (NIS) Regulations - A pocket guide for operators of essential services now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
