NDR and NIS 2
How to transform an obligation in an opportunity

Going well beyond the objectives of NIS 1, which provided a minimum of adequate security conditions for entities and sectors targeted by cyber attacks, NIS 2 goes further.  

Its objective is to strengthen our overall resilience in terms of cyber security by addressing new sectors and entities that are now critical targets.  

This is a necessary development in view of the growing and sophisticated threat, targeting players such as local authorities, public health establishments, higher education establishments and all players in the supply chain, not included in NIS 1.  

It will also make it possible to respond to the heterogeneous application of the old directive between Member States, which leads to a lack of coherence and a flagrant fragmentation in the treatment of cyber attacks for sensitive sectors on a European scale. 

Thanks to this new regulatory framework, clear improvements are expected: 

• Harmonisation of the implementation of the Directive across Europe, with more precise regulations.   
• A strengthening of the overall level of security, with strict and proportional criteria depending on the categorisation of the given organisation, between essential or important entities.  
• Increased responsibility and powers of supervision, control and sanction for the Member States to ensure that these measures are properly implemented throughout the areas concerned.  
• This responsibility is also shared by businesses, which must manage their own risks. 

First of all, no concrete, binding measures have yet been taken (other than notification of contact persons, incident reporting procedures and the potential sharing of information). The Member States are currently in the process of transposing the directive at national level. [Saut de retour à la ligne]However, there are a number of key elements that must inevitably be taken into account by the entities concerned, and these are essentially based on NIS 1.  

A governance policy must be put in place to ensure adequate risk management for your IS (audit, risk analysis, security indicators, accreditation, mapping, etc.).  

Certain key protection elements will need to be considered in relation to your security policies linked to your architecture itself, its administration, access (IAM), maintenance, etc. (network partitioning, access, etc.). Finally, appropriate and reinforced detection measures, as well as incident response and management measures, must be put in place to maintain business continuity in a crisis situation should a cyber attack occur on your networks (MCS, MCO, alert handling, crisis management policy, etc.). In short, a good start to your compliance! These areas will have to be taken into account under NIS 2, but we need to wait for further details at European and national level, particularly in terms of correspondence with other legislation added to NIS 2 (DORA, CRA, AI Act, LPM in France, etc.).  

These are essential compliance needs that Gatewatcher has been addressing since its creation in 2015. Gatewatcher first entered the compliance market, responding to the various legislative requirements that are still in force thanks to its ‘secure by design’ NDR.  

Today, as a company, your challenges lie mainly in :  

• Identifying and protecting your risks 
• Protecting your data and sensitive information  
• Investing in or strengthening your cybersecurity technologies  
• Implementing incident management and CSIRT notification measures  
• Training and awareness-raising for your employees  

Gatewatcher’s experience, along with the refinement and combination of its various NDR and CTI solutions, enables you to answer all these questions.  

First and foremost, it is essential to maintain complete visibility of your information system, thanks to an inventory and mapping of all your assets and user behaviour on your network.  

Once your risks and challenges have been identified, in particular the identification of your sensitive data and information, it is important to control your IS and comply with your security policies by adapting, for example, to your various restricted and confidential networks.  

Whether you’re investing in a cybersecurity solution for the first time or looking to strengthen your existing cyber technologies, NDR, as a pillar of your strategy, enables you to reinforce your overall cybersecurity position. Simplified, seamless interconnection with your entire ecosystem (EDR, XDR, SIEM, SOAR, NGFW, etc.); proactive research; easy, rapid qualification and remediation of incidents by your cyber experts to limit their overload; you have all the keys in hand to effectively manage cyber threats in line with your environments.  

In this way, we give you the power to protect your network and the peace of mind you need to focus on your business, and why not raise awareness and train your staff in key cyber security issues. 

Today, compliance must be seen as a strategic opportunity for companies, and not as an additional constraint to be met in order to comply with regulatory standards.   

We need to take a long-term view. Achieving compliance not only enables you to build a comprehensive, up-to-date response to all your compliance needs (NIS, DORA, CRA, ISO 27001, etc.), but also to anticipate future regulatory developments. An NDR solution enables you to meet these challenges, but above all to go even further! 

Beyond compliance, NDR enables you to raise your overall level of cybersecurity and optimise your investments for the most effective detection of and response to threats.

Building your cybersecurity strategy with NDR as a cornerstone means choosing a long-term cyber strategy, with anticipation as the keystone. For cyber-attackers and defenders alike, time is of the essence. The aim is to be able to respond effectively to certain and potential future threats, thanks to an adapted and responsive defence system.  

Think of NIS 2 as a guide to identifying and prioritising your risks and areas of weakness, as well as your cybersecurity strengths, in order to draw up a dynamic strategy to combat cyber attacks. When compliance is approached strategically, it transforms from a necessity into a real opportunity and competitive advantage.  

Imagine a cyber security strategy that not only reacts to threats, but also prevents them. In fact, as the vigilant guardian of your IS, Gatewatcher’s NDR guarantees you :  

• Enhanced real-time, 360° visibility 
• Anticipated and advanced detection at every stage of the killchain of known, unknown (0-Day) and hidden threats (encrypted flows)  
• Accelerated and prioritised investigations and remedies 
• Control over your information and your cyber risks 
• Reduced attack surface and impact on your business  

• An overall improvement in your cyber score   

Gatewatcher’s advanced technology enables you to build a consolidated, proactive defence mechanism based on advanced analysis, machine learning and artificial intelligence, including generative AI.  

So rely on NDR to turn this obligation into an opportunity for your business!