Join our two-day NIS2 and cybersecurity workshop with the CCB

NIS2: Looking forward to giving a 2-day workshop with Chris A. De Vuyst from the Centre for Cybersecurity Belgium (= Belgian cybersecurity authority) next week, further to tremendous preparatory work by Chris and Val�ry Vander Geeten. [Thanks again Val�ry as well as the Data Protection Institute for thinking of me in this respect!]

The Network and Information Security (NIS) Directive already emphasised the importance of adopting “security by design” as a mantra in various sectors; NIS2 has expanded the scope considerably and introduced additional legal requirements, notably as regards management bodies (with requirements in terms of awareness, involvement in the setting of a cybersecurity strategy, and even potential liability of members of management bodies in case of non-compliance).

When the Belgian legislator was looking at how to implement NIS2 in Belgian law, I was involved in reflections of the CCB on how to define “management bodies” (and who is a member thereof) – a fascinating and highly significant legal question, considering the ramifications (= who is subject to requirements and can be held liable even).

So it will be a great pleasure to present the legal angle of NIS2, to complement the technical angle that Chris will be presenting.

If you feel that your organisation isn’t quite there yet, no need to shout it on the rooftops – but do get in touch. NIS2 isn’t an exercise in the production of documents; it requires process changes, adaptations to training, reviewing strategies and improving dialogue. A bit like the GDPR isn’t just about privacy notices – Data protection is a much broader approach, and information security is that as well.