NIS2 – Next-Generation Cybersecurity

The EU's NIS2 Directive significantly expands the scope of affected organizations and sets specific requirements for risk management, access control, and incident reporting. IAM is a key area for implementation in this context.

What is NIS2?

The NIS2 Directive (Network and Information Security Directive 2) is the revised EU Cybersecurity Directive, which must be transposed into national law by October 2024. It expands the scope to cover significantly more sectors and companies than the previous version and substantially increases the requirements for cybersecurity measures.

Who is Affected?

Key Facilities

Energy, transportation, banking, financial market infrastructure, healthcare, drinking water, wastewater, digital infrastructure, public administration, aerospace.

Important Facilities

Mail, waste management, chemicals, food, manufacturing, digital service providers (marketplaces, search engines, social networks), research.

NIS2 Requirements Relevant to IAM

Access Control

NIS2 explicitly requires robust access controls, the principle of least privilege, and multi-factor authentication for critical systems.

Privileged Access

Controlling privileged access is a core component of NIS2. PAM solutions and their documentation will be a key area of focus during audits.

Incident Detection & Response

Early detection of security incidents and structured reporting within 24 hours (initial report) or 72 hours (follow-up report).

Documentation & Evidence

Companies must document the implementation of security measures and be able to provide evidence of this to regulatory authorities.

Supply Chain Risk

NIS2 requires that cybersecurity risks in the supply chain be taken into account - including the identity management of partner companies.

Governance & Liability

Members of executive management can be held personally liable. Cybersecurity is becoming a top priority - including in the IAM sector.

Our NIS2 Consulting Services

From Gap Analysis to Action Plan

IPG analyzes your IAM architecture in the context of NIS2 requirements and develops a prioritized action plan to achieve compliance.

Impact Analysis
Determining whether and to what extent NIS2 applies to your company
IAM Gap Analysis
Comparison of existing IAM measures with NIS2 requirements
Action Plan
Prioritized Actions with Cost Estimates and Responsibilities
Implementation Support
Technical and organizational support during implementation

Request NIS2 Consulting

Find out what IAM measures you need to ensure NIS2 compliance.

Request a Consultation

Service

Mastering the One Identity Angular Transition

What does this mean for your company? What migration scenarios exist? We’ll show you HOW! ✅

Service

IAM - Regulations

Regulatory requirements in the field of cybersecurity are becoming increasingly complex. With our compliance solutions, we help you minimize risks and efficiently comply with regulations.

Service

Digital Authorization Framework for IAM, Compliance & Audit

A digital authorization framework for transparent access rights, compliance, and governance. IPG provides support from analysis through implementation.

Service

Application Operations for Secure IAM Operations

IPG takes over the operation of your IAM, PAM, or SSO solution - from a structured handover at the end of the project through to ongoing, SLA-backed routine operations.

Service

Entra Assessment

Read our white paper to learn how to gain transparency and control over your Entra environment - and why this is the first step toward a robust, secure IAM strategy.

Service

Operational Support – Ihr IAM-Betrieb in besten Händen

IPG übernimmt den laufenden Betrieb Ihrer IAM-, PAM- oder SSO-Applikationen. Ob als ergänzender 2nd/3rd Level Support oder als vollständiger Operational Support.

Webcast

Webcast: Expedition to Identity Management

Join IPG’s webcast “Expedition to Identity Management” for expert insights, strategies, and best practices in IAM transformation.

Partner

IPG is Platinum+ Partner from One Identity

OneIdentity, a brand of Quest Software, offers community-based solutions that simplify IT management and create more room for innovation.

Referenz

From zero to one hundred in just three months

Attacks on IT infrastructure are a serious threat to companies. Silhouette Group wanted to better protect itself against cyber attacks. ✅ Read more.

Titelbild zur Referenz IAM von Otto Gruppe

Success Story

IAM Solution for Otto Group IT

The Otto Group implements a complex user lifecycle with a high degree of customization and automation, aimed at productivity and rapid employee integration.

Success Story

Elimination of data clutter through identity management.

This is how we create transparency, efficiency, and say goodbye to data clutter. Find out how our experts are making history with SID. Read more about it.

Success Story

IAM Transformation: SR Technics Optimizes IT

IAM Transformation in Practice. How SR Technics Automates Processes, Meets Compliance Requirements, and Reduces Costs with a Modern IAM Solution. Learn more in the Success Story!

Hintergrundgrafik für IPG Partner Clearsky

Blog 12/14/21

Combine IT service management and IAM systems

How do companies bring their complex IT service management and IAM systems together in an end user-friendly way? In our interview, Clear Skye and the IPG Group show, how it works very easily