Experts Criticize Planned Implementation of the NIS 2 Directive
Berlin, November 4, 2024 (hib) – Experts from the scientific advisory board on information technology security of the German Federal Office for Information Security (BSI) have criticized the planned implementation of the EU’s Network and Information Security Directive 2 (NIS 2). In a statement, they said the draft law does not sufficiently address the risks to critical infrastructure and could even weaken security in some areas.
The NIS 2 Directive aims to strengthen the security of critical infrastructure, such as energy, transportation, and healthcare, against cyberattacks. However, the advisory board argues that the draft law does not go far enough in this regard.
One of the main criticisms is that the draft law does not require operators of critical infrastructure to implement specific security measures. Instead, it allows them to choose their own measures, which could lead to a lack of consistency and effectiveness.
The advisory board also criticized the draft law’s approach to risk assessment. They argue that the law does not provide enough guidance on how operators should assess the risks to their systems, and that this could lead to inadequate security measures.
In addition, the advisory board expressed concern that the draft law could actually weaken security in some areas. For example, it said the law could make it easier for attackers to target critical infrastructure by providing them with more information about the vulnerabilities in these systems.
The advisory board called on the government to revise the draft law and address the concerns raised. They said that the implementation of the NIS 2 Directive is a critical opportunity to strengthen the security of critical infrastructure, and that it is important to get it right.
The government is expected to finalize the draft law in the coming weeks. It is then expected to be submitted to the Bundestag for approval.
Expertenkritik an geplanter Umsetzung der NIS-2-Richtlinie
The AI has provided us with the news.
I’ve asked Google Gemini the following question, and here’s its response.
Kurzmeldungen (hib) a new article on 2024-11-04 13:12 titled “Expertenkritik an geplanter Umsetzung der NIS-2-Richtlinie”. Please write a detailed article on this news item, including any relevant information. Answers should be in English.
61