The EU's NIS2 Directive significantly expands the scope of affected organizations and sets specific requirements for risk management, access control, and incident reporting. IAM is a key area for implementation in this context.
NIS2 – Next-Generation Cybersecurity
What is NIS2?
The NIS2 Directive (Network and Information Security Directive 2) is the revised EU Cybersecurity Directive, which must be transposed into national law by October 2024. It expands the scope to cover significantly more sectors and companies than the previous version and substantially increases the requirements for cybersecurity measures.
Who is Affected?
Key Facilities
Energy, transportation, banking, financial market infrastructure, healthcare, drinking water, wastewater, digital infrastructure, public administration, aerospace.
Important Facilities
Mail, waste management, chemicals, food, manufacturing, digital service providers (marketplaces, search engines, social networks), research.
NIS2 Requirements Relevant to IAM
Access Control
NIS2 explicitly requires robust access controls, the principle of least privilege, and multi-factor authentication for critical systems.
Privileged Access
Controlling privileged access is a core component of NIS2. PAM solutions and their documentation will be a key area of focus during audits.
Incident Detection & Response
Early detection of security incidents and structured reporting within 24 hours (initial report) or 72 hours (follow-up report).
Documentation & Evidence
Companies must document the implementation of security measures and be able to provide evidence of this to regulatory authorities.
Supply Chain Risk
NIS2 requires that cybersecurity risks in the supply chain be taken into account - including the identity management of partner companies.
Governance & Liability
Members of executive management can be held personally liable. Cybersecurity is becoming a top priority - including in the IAM sector.
Our NIS2 Consulting Services
From Gap Analysis to Action Plan
IPG analyzes your IAM architecture in the context of NIS2 requirements and develops a prioritized action plan to achieve compliance.
-
Impact Analysis
Determining whether and to what extent NIS2 applies to your company -
IAM Gap Analysis
Comparison of existing IAM measures with NIS2 requirements -
Action Plan
Prioritized Actions with Cost Estimates and Responsibilities -
Implementation Support
Technical and organizational support during implementation
Request NIS2 Consulting
Find out what IAM measures you need to ensure NIS2 compliance.
Service
Regulations in the DACH Region: Cybersecurity Compliance
Service
Mastering the One Identity Angular Transition
Event
Next-Gen API Management
Blog
Google Cloud Next 25
Service
Application Operations for Secure IAM Operations
Service
Training courses by IPG
Service
Entra Assessment
Service
IAM Health Check – Optimize Your Access Management
Service
IAM Operational Support: Secure Operations with an SLA
Service
Digital Authorization Framework for IAM, Compliance & Audit
Service
Agile Transformation & New Work
Service
API Economy, DevOps, Low Code & MACH
Service
Adoption & Change Management
Service
IT & Application Modernization
Service
Training & Coaching
Service
Value Added Reselling
Service
Digital Architecture
Service
Spend Management Consulting
Service
Process Transformation, Integration & Automation
Service