Arcadiz, in cooperation with the Belgian Digital Infrastructure Association (BDIA), conducted a survey on the implactions of the NIS2 directive on encryption in various sectors and the extent to which Belgian companies have prepared for the requirements imposed by NIS2.
The survey found that as many as three-quarters of companies will not be ready in time for implementation on Oct. 17, 2024. Only 18% of respondents say they have a good understanding of NIS2. One IT manager in the manufacturing sector articulated the uncertainty, “We still don’t know if we are covered by the NIS2 directive.” A compliance manager in the healthcare sector added, “There is a lack of time and resources to take the necessary steps.”
NIS2, adopted by the European Union, aims to strengthen the cybersecurity landscape in all member states. Its predecessor, NIS, was adopted in 2016 and focused on critical industries. This updated and expanded directive underscores the importance of data security and specifically emphasizes the encryption of “data at rest” and “data in transit. As cyber threats continue to evolve, encryption is a fundamental defense mechanism to protect sensitive information from unauthorized access and breaches.
“Companies can no longer wait,” said Marcel Lücht, Operations Director at Arcadiz. Carole Santens, Managing Director BDIA, underscores this: “it is essential that companies take quick steps to protect their digital infrastructure.” Both availability and protection of data are crucial aspects under the NIS2 regulations, which come into effect in three weeks (Oct. 17).
The white paper written about the research can be found here.
