{ "item_title" : "NIS2 in Practice", "item_author" : [" Danilo Saraiva "], "item_description" : "How do you comply with the EU NIS2 Directive when your organisation does not have a giant security team?The NIS2 Directive (Directive (EU) 2022/2555) represents the biggest shift in European cybersecurity regulation in a decade. Expanding across 18 critical sectors, it introduces personal accountability for management bodies, strict 24-hour and 72-hour incident notification deadlines, mandatory supply-chain security, and administrative fines of up to 10 million or 2% of global annual turnover. Yet most organisations brought into scope-and the small and medium-sized suppliers serving them-rely on lean teams of two to five people who must run daily IT and security operations while preparing for regulatory supervision.NIS2 in Practice is a rigorous, no-nonsense implementation guide built specifically for small GRC (Governance, Risk, and Compliance), security, and infrastructure teams. Every legal requirement is cited directly to primary European and national texts and translated into concrete operational decisions, realistic priorities, and auditable evidence.Throughout the book, you will follow Beta Alimentar, a mid-sized industrial manufacturer classified as an important entity, and Alfa Managed Services, its IT and security provider, as they navigate scope assessment, board training, risk management, legacy operational technology (OT), supplier contracts, and a real-world ransomware incident.What you will learn inside: Scope and Classification: How the size-cap rule, the 18 Annex I and Annex II sectors, and special exceptions work in practice-and whether your organisation is an essential entity, an important entity, or a critical supplier in the value chain.The EU Regulatory Ecosystem: How NIS2 interacts with GDPR, DORA (as lex specialis), the CER Directive, the Cyber Resilience Act (CRA), eIDAS 2, and Commission Implementing Regulation (EU) 2024/2690 for digital and managed service providers.Management Accountability: What board members and executives must approve, oversee, and learn-and how personal liability and supervisory enforcement operate.Proportionate Risk Management & Controls: How to implement the 10 mandatory minimum measures of Article 21-from multi-factor authentication, cryptography, and backup resilience to vulnerability handling and basic cyber hygiene-mapped to ISO/IEC 27001:2022 and NIST CSF 2.0.Multi-Stage Incident Reporting: How to structure internal detection and escalation to meet the 24-hour early warning, 72-hour incident notification, and one-month final report deadlines without pulling engineers away from containment.Supply-Chain Security: How to evaluate ICT suppliers and managed service providers-and how SME suppliers can answer customer security questionnaires without drowning in bureaucracy.A 90-Day Implementation Plan: A week-by-week roadmap for small teams, backed by an in-depth national transposition case study (Portugal's Decree-Law No. 125/2025 and CNCS Regulation No. 756/2026) and a comparative analysis across EU Member States, the UK, and the United States.Ready-to-Use Annexes & Templates: Includes a 103-item compliance checklist with ownership and evidence tracking, 13 foundational security policy and procedure templates, a regulatory timeline, and a 164-term legal and technical glossary.", "item_img_path" : "https://covers4.booksamillion.com/covers/bam/9/79/816/592/9798165925351_b.jpg", "price_data" : { "retail_price" : "31.99", "online_price" : "31.99", "our_price" : "31.99", "club_price" : "31.99", "savings_pct" : "0", "savings_amt" : "0.00", "club_savings_pct" : "0", "club_savings_amt" : "0.00", "discount_pct" : "10", "store_price" : "" } }

Overview

Customers Also Bought

Details