WHAT IS NIS2?

The NIS2 directive is a comprehensive new cybersecurity regulation designed to strengthen cybersecurity resilience across the EU.

NIS2 places new cybersecurity obligations on organisations in critical infrastructure sectors, including transport and logistics.

WHERE DO I START?

Designate a cybersecurity champion within your organisation.
Conduct a cybersecurity assessment. This includes your supply chain.
Put a risk management plan in place. There are 10 key measures (listed below) to get you started.
Make senior management aware of their obligations – and the penalties for non-compliance.
Prepare an incident handling plan. Preparation is key to recovery.
Start cybersecurity training – your team are your first line of defence.

HOW CAN APTARUS HELP?

Training is one of the most effective things you can do to protect your organisation from cyberattacks, and a key part of the NIS2 regulations.

We offer a range of online cybersecurity awareness courses - specifically designed for the logistics sector.

10 KEY MEASURES FOR NIS2

Risk assessment policies and procedures in place for IT systems.
A cybersecurity incident response plan must be in place.
A business continuity plan should be in place.
Your supply chain must be audited for cybersecurity also.
Cybersecurity policies in place for procurement and operation of IT systems.
Policies and procedures in place for measuring the effectiveness of cybersecurity measures.
Cybersecurity training for all staff who use/access company IT systems.
Policies and procedures in place for cryptography and encryption.
Policies and procedures in place for employees who handle sensitive data, including access control.
Consider use of Multi-factor Authentication (MFA), encryption, and other enhanced security measures, where appropriate.

Key Cybersecurity Challenges For The Transport Sector

Ransomware Attacks

Ransomware is a growing threat to the transportation sector, disrupting operations and demanding payment to restore access to critical systems.

Supply Chain Vulnerability

Third-party suppliers and contractors can introduce vulnerabilities into transportation systems through weak security practices.

Threats To Safety Systems

The sector is home to safety-critical systems (train control systems, aviation and maritime navigation systems) that can cause harm if compromised.

Connected Devices

The use of connected devices such as GPS trackers, smart sensors, and in-vehicle systems increases the risk of cyberattacks and data breaches.

Limited Investment

Transportation companies often focus on optimizing efficiency; cybersecurity is not a top priority, leading to limited security budget and skills gaps.

Employee Training

A lack of employee training and awareness in cybersecurity increases the risk of human error, such as falling for phishing scams or not following best practices.

Need more info?