{"id":1823,"date":"2024-07-09T08:56:02","date_gmt":"2024-07-09T06:56:02","guid":{"rendered":"https:\/\/sourceminds.nl\/?p=1823"},"modified":"2025-06-25T12:28:25","modified_gmt":"2025-06-25T10:28:25","slug":"nis2-het-gaat-er-nu-echt-aankomen-dit-jaar","status":"publish","type":"post","link":"https:\/\/sourceminds.nl\/en\/blogs\/nis2-het-gaat-er-nu-echt-aankomen-dit-jaar\/","title":{"rendered":"NIS2, it's really coming this year\u00a0\u00a0"},"content":{"rendered":"Readtime:<\/span> 2<\/span> min<\/span><\/span>\n

This also means it's time to check your IT contracts or take them into account when entering into new contracts. There are several points of attention to ensure that you meet the requirements and best practices of NIS2. We have listed a number of points of attention below:<\/p>\n\n\n\n

Security Policies and Procedures:<\/p>\n\n\n\n

    \n
  • \u2022\tInclude security requirements in contracts: Specify the technical and organizational measures that suppliers must implement to comply with NIS2.<\/li>\n\n\n\n
  • \u2022\tIncident response and reporting requirements: Clear agreements on how and when security incidents must be reported, both internally and externally.<\/li>\n<\/ul>\n\n\n\n

    Data Privacy and Protection:<\/p>\n\n\n\n

      \n
    • \u2022\tData encryption and protection: Contractual obligations to protect data, both in transit and at rest.<\/li>\n\n\n\n
    • \u2022\tAccess control and identity management: Agreements on who has access to data and systems, and how this access is managed and controlled.<\/li>\n<\/ul>\n\n\n\n

      Monitoring and Auditing:<\/p>\n\n\n\n

        \n
      • \u2022\tAudit and Inspection Rights: Provisions that give you the right to audit the vendor\u2019s systems and processes to ensure compliance with NIS2.<\/li>\n\n\n\n
      • \u2022\tCompliance Monitoring: Continuous monitoring requirements and reporting obligations of the vendors.<\/li>\n<\/ul>\n\n\n\n

        Collaboration and Support:<\/p>\n\n\n\n

          \n
        • \u2022\tIncident Collaboration: Mechanisms for collaboration and coordination between parties in the event of a security incident.<\/li>\n\n\n\n
        • \u2022\tSupport and Training: Obligations of vendors to provide support and training for your organization\u2019s personnel regarding NIS2 compliance.<\/li>\n<\/ul>\n\n\n\n

          Contractual Sanctions and Obligations:<\/p>\n\n\n\n

            \n
          • \u2022\tSanctions and Liability: Clear provisions on the consequences of non-compliance with NIS2 requirements, including fines, damages and termination of the contract.<\/li>\n\n\n\n
          • \u2022\tInsurance: Agreements on insurance that provide coverage for potential security incidents and data breaches.<\/li>\n<\/ul>\n\n\n\n


            Business Continuity and Recovery Plans:<\/p>\n\n\n\n

              \n
            • \u2022\tDisaster recovery and business continuity planning: Obligations for suppliers to have and test effective recovery plans to ensure continuity of critical services.<\/li>\n<\/ul>\n\n\n\n

              Legal and Regulatory Compliance:<\/p>\n\n\n\n

                \n
              • \u2022\tChanges in legislation: Provisions that anticipate changes in legislation and the obligations of the parties to comply with new or changed regulations.<\/li>\n\n\n\n
              • \u2022\tTermination and transition: Clear agreements on the termination of contracts and the secure transfer of services and data to ensure continuity and compliance.<\/li>\n<\/ul>\n\n\n\n

                By carefully considering these aspects and incorporating them into IT contracts, you will be better prepared for NIS2 compliance and the associated security and compliance challenges.
                <\/p>\n\n\n\n

                #sourceminds<\/strong>\u00a0#itcontracting<\/strong>\u00a0#itsourcing<\/strong>\u00a0#itstrategy<\/strong>\u00a0#contractlifecyclemanagment#contractmanagement<\/strong>\u00a0#itsm<\/strong><\/p>","protected":false},"excerpt":{"rendered":"

                Leestijd:<\/span> 2<\/span> min<\/span><\/span>Daarmee wordt het ook tijd om de IT-contracten te checken, of rekening mee te houden wanneer  nieuwe contracten gesloten worden. Er zijn er verschillende aandachtspunten om ervoor te zorgen dat je voldoet aan de vereisten en best practices van NIS2. We hebben een aatal aandachtpunten hieronder opgesomd: Security Policies en Procedures: Data Privacy en Bescherming: Monitoring […]<\/p>\n","protected":false},"author":2,"featured_media":1825,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1823","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t