In July 2016, the EU adopted Directive (EU) 2016/1148 on measures for a high common level of security of network and information systems in the European Union (the NIS Directive), confirming the sustained focus in recent years on increasing the resilience of ICT infrastructures used by operators of essential services and digital service providers across Member States. The directive sets out harmonized measures for achieving a high common level of security of networks and information systems in the Union, together with new cooperation mechanisms at European level.
The NIS Directive applies to entities known as OES (Operators of Essential Services)—public or private entities in sectors such as drinking water supply, energy, transport, healthcare, banking, and financial market infrastructures—as well as DSPs (Digital Service Providers) such as online marketplaces, online search engines, and cloud computing services.

GMB Computers provides consulting for implementing the measures and procedures that the client (as a “digital service provider” – DSP) must follow to comply with the requirements of the NIS Directive.

Highlights:

• Identifying essential services (as defined by the NIS Directive) based on an analysis of the services provided by the client;
• Establishing appropriate and proportionate technical and organizational measures to meet the following minimum security requirements:
• Identifying the networks and information systems that support the delivery of essential services;
• Internal security policies and plans for networks and information systems;
• Incident management for events affecting the security of networks and information systems;
• Procedures to prevent unauthorized access to networks and information systems;
• Procedures to prevent disclosure of data held within networks and information systems to persons other than those authorized to access it;
• Action plan by security alert level for networks and information systems;
• Risk management;
• Procedures to ensure service continuity;
• Establishing the communication process with CERT-RO to provide information about cybersecurity incidents, their impact, and any other information that may be requested;
• Appointing persons responsible for the security of networks and information systems to monitor contact channels with CERT-RO (the “NIS” responsible) and communicate their details to CERT-RO;
• Managing changes related to the essential services provided.

As part of this service, we deliver documentation templates and provide recommendations for adapting them to the client’s specific activity, offering consulting on implementing the necessary measures in order to align with mandatory legal requirements. The service is delivered with the support of our experts in cybersecurity and information security auditing.

Contact us

GMB Computers consultants and technicians are here to help. Whether you want to tailor a solution together, request an offer for products and equipment from our catalog, or need technical support and expert diagnostics, we are ready to find the most effective solution for you.

Phone: +40 728 100 573
Email: comercial@gmbcomputers.ro