Update Information Management 2019 - 15. Runde seit 2005 Auszug 5 "EU Directive on security of network and information systems (NIS Directive) " aus dem Vortrag 3 "Rechtsfragen im Information Management" von Dr. Ulrich Kampffmeyer Video zu den Folien http://bit.ly/UpdateIM19-NIS-Directive

1. PROJECT CONSULT
Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH
www.PROJECT-CONSULT.com
© PROJECT CONSULT 2019
Postfach 20 25 55
20218 Hamburg
1
© PROJECT CONSULT Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH 2011 / Autorenrecht: <Vorname Nachname> Jun-19 / Quelle: PROJECT CONSULT 1
Dieses Werk ist urheberrechtlich geschützt. Die Verwertung, insbesondere die Vervielfältigung des Werks (auch in Teilen) ist nur mit
schriftlicher Zustimmung erlaubt. Die Präsentation wird ausschließlich für die private, nicht kommerzielle Information bereit gestellt.
Dr. Ulrich Kampffmeyer
Update Information Management 2019
-Digital First-
Hamburg / Frankfurt
29. Januar 2019 / 20.Februar 2019
EU Directive on security of network and
information systems (NIS Directive)

2. © PROJECT CONSULT Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH 2011 / Autorenrecht: <Vorname Nachname> Jun-19 / Quelle: PROJECT CONSULT 2
Update IM 2019 Ulrich Kampffmeyer Aktuelles_Rechtsfragen 20.02.2019 © PROJECT CONSULT 2019 Seite 2
NIS Directive
The NIS Directive is the first piece of EU-wide
legislation on cybersecurity. It provides legal measures
to boost the overall level of cybersecurity in the EU.
https://ec.europa.eu/digital-single-market/en/network-and-information-security-nis-directive
https://ec.eur
opa.eu/digital-
single-
market/sites/d
igital-
agenda/files/n
ewsroom/nis_
directive_for_
website_001_
32531_162.jpg

3. © PROJECT CONSULT Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH 2011 / Autorenrecht: <Vorname Nachname> Jun-19 / Quelle: PROJECT CONSULT 2
Update IM 2019 Ulrich Kampffmeyer Aktuelles_Rechtsfragen 20.02.2019 © PROJECT CONSULT 2019 Seite 3
NIS Directive
https://ec.europa.eu/digital-single-market/en/network-and-information-security-nis-directive
The NIS Directive provides legal measures to boost the overall level of
cybersecurity in the EU by ensuring:
• Member States' preparedness by requiring them to be appropriately
equipped, e.g. via a Computer Security Incident Response Team (CSIRT)
and a competent national NIS authority,
• cooperation among all the Member States, by setting up a cooperation
group, in order to support and facilitate strategic cooperation and the
exchange of information among Member States. They will also need to
set a CSIRT Network, in order to promote swift and effective operational
cooperation on specific cybersecurity incidents and sharing information
about risks,
• a culture of security across sectors which are vital for our economy and
society and moreover rely heavily on ICTs, such as energy, transport,
water, banking, financial market infrastructures, healthcare and digital
infrastructure. Businesses in these sectors that are identified by the
Member States as operators of essential services will have to take
appropriate security measures and to notify serious incidents to the
relevant national authority. Also key digital service providers (search
engines, cloud computing services and online marketplaces) will have to
comply with the security and notification requirements under the new
Directive.
Zusatzinformation
nur Handout

4. © PROJECT CONSULT Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH 2011 / Autorenrecht: <Vorname Nachname> Jun-19 / Quelle: PROJECT CONSULT 2
Update IM 2019 Ulrich Kampffmeyer Aktuelles_Rechtsfragen 20.02.2019 © PROJECT CONSULT 2019 Seite 4
A "NIS Toolkit"
https://ec.europa.eu/digital-single-market/en/network-and-information-security-nis-directive
As the cybersecurity threat landscape is evolving fast, it is
necessary to swiftly implement the Directive. In view of the
impending deadlines for its transposition into national
legislation (by 9 May 2018), and for the identification of
operators of essential services (by 9 November 2018), the
Commission adopted on 13 September 2017 a
Communication that aims at supporting Member States in
their efforts to implement the Directive swiftly and
coherently across the EU.
The "NIS toolkit" provides practical information to Member
States, e.g. by presenting best practices from the Member
States and by providing explanation and interpretation of
specific provisions of the Directive to clarify how it should
work in practice.
Zusatzinformation
nur Handout

5. © PROJECT CONSULT Unternehmensberatung Dr. Ulrich Kampffmeyer GmbH 2011 / Autorenrecht: <Vorname Nachname> Jun-19 / Quelle: PROJECT CONSULT 2
Update IM 2019 Ulrich Kampffmeyer Aktuelles_Rechtsfragen 20.02.2019 © PROJECT CONSULT 2019 Seite 5
Cyber-Sicherheitsstragie für Deutschland
http://www.bmi.bund.de/cybersicherheitsstrategie/
„Die Handlungsfähigkeit und Souveränität
Deutschlands müssen auch im Zeitalter der
Digitalisierung gewährleistet sein. Eine
zukunftsgerichtete Cyber-Sicherheitspolitik ermöglicht,
dass unser Land die enormen Chancen und
Potentiale der Digitalisierung im
gesamtgesellschaftlichen Interesse voll ausschöpfen
kann, indem die damit verbundenen Risiken
beherrschbar werden.“