How are you drawing the line on NIS2 incident reporting?
I’m trying to turn NIS2’s open-ended language into something our team can apply consistently. How should we judge whether an incident is significant, what counts as state-of-the-art, and…
I’m trying to turn NIS2’s open-ended language into something our team can apply consistently. How should we judge whether an incident is significant, what counts as state-of-the-art, and…
We recently came into scope for NIS2, and with the October deadline approaching, I'm trying to decide how to focus our remaining effort. We already hold ISO 27001…