Ukuqaliswa komyalelo we-NIS2 e-Spain: isimo, izibopho nezinselele

Informatec Digital » Izinsiza » Ukuqaliswa komyalelo we-NIS2 e-Spain: isimo, izibopho nezinselele

I -European NIS2 Directive ishintshe ngokuphelele isimo sokuphepha kwe-cyber eYurophu, ikakhulukazi eSpain. Lokhu akuyona nje enye imithethonqubo; imelela ushintsho oluyisisekelo endleleni izinkampani kanye nohulumeni abaphatha ngayo izingozi zedijithali, babike izehlakalo, futhi baxhumane neziphathimandla.

Okwamanje, iSpain yenza intuthuko eqhubekayo kodwa ebambezelekile ngokusobala ekushintsheni kwayo: isikhathi sokugcina esisemthethweni kwakungu-Okthoba 2024, futhi kuze kube namuhla, uMthetho Wokuhlela Nokuphatha Wezokuphepha Kwe-Cybersecurity wesikhathi esizayo usaqhubeka nezinqubo zephalamende. Lesi simo sidala isimo esingavamile: i-Directive isivele ibopha ezingeni laseYurophu, kodwa uhlaka lwezomthetho oluqondile lukazwelonke alukavunywa, okushiya izinhlangano eziningi zibambeke phakathi kwesibopho sokuziphatha nesamasu sokulungiselela nokuhlola isimo sazo kanye nokungabikho komthetho osebenza ngokugcwele.

Iyini i-NIS2 Directive futhi kungani ishintsha imithetho yegeyimu?

Isiqondiso (EU) 2022/2555, esaziwa ngokuthi i-NIS2 , sithatha indawo yesiqondiso sokuqala se-NIS ngenhloso yokusungula izinga eliphezulu lokuphepha kwe-inthanethi kwamanethiwekhi nezinhlelo zolwazi kulo lonke i-European Union. Inhloso yaso ukuqinisa ukuqina ezigamekweni ze-inthanethi ezingathinta izinsizakalo ezibalulekile kanye nokusebenza okuvamile komphakathi kanye nomnotho.

Ngokungafani neyandulelayo, i-NIS2 yandisa kakhulu inani lemikhakha kanye nezinhlangano ezithintekile , ingahlanganisi nje kuphela ingqalasizinda ebalulekile yendabuko (amandla, ezokuthutha, amanzi, amabhange noma ezempilo), kodwa futhi nezindawo ezifana nokuphathwa komphakathi, ingqalasizinda yedijithali, izinsizakalo zeposi kanye nezokuthuthwa kwezimpahla, ukuphathwa kwemfucuza, ukukhiqizwa okuthuthukisiwe noma ukukhiqizwa kokudla kanye nokusabalalisa.

I-Directive isungula uhlaka oluhambisanayo lwezidingo zokuphepha kwe-inthanethi ezincane ze-EU yonke, ngezinyathelo zokuphathwa kwezingozi, ukuphatha, ukuvikelwa kochungechunge lokuhlinzekwa kwempahla, ukuqhubeka kwebhizinisi, kanye nesaziso sezehlakalo zangaphambi kwesikhathi. Ngaphezu kwalokho, iqinisa uhlelo lokuqapha kanye nezijeziso futhi yandisa ngokusobala umthwalo wemfanelo wabaphathi abaphezulu.

Enye intuthuko ebalulekile ukuzibophezela okucacile ekubambisaneni phakathi kwamazwe angamalungu kanye nokudalwa noma ukuqinisa amaQembu Empendulo Yezehlakalo Zokuphepha Kwamakhompyutha Kazwelonke (ama-CSIRT) , akwazi ukuxhumanisa ezingeni laseYurophu ezimweni ezinzima kakhulu. I-ENISA, i-EU Agency for Cybersecurity, idlala indima ebalulekile kule ndawo, isekela ukuthuthukiswa kwamasu kazwelonke okuphepha kwe-cyber kanye nokukhuthaza imikhuba emihle kakhulu.

Umkhakha wezezimali empeleni awufakiwe emkhakheni we-NIS2 , njengoba imithethonqubo ye-DORA iza kuqala njengochwepheshe be-lex. Noma kunjalo, ukuqonda kokuqina kokusebenza kwedijithali okuqhuba i-DORA kuhambisana ngokuphelele nefilosofi ye-NIS2.

Isimo samanje sokuguqulwa kwe-NIS2 e-Spain

Isiqondiso se-NIS2 saqala ukusebenza ngoJanuwari 16, 2023 , futhi sabeka umhla ziyi-17 kuMfumfu 2024, njengosuku lokugcina lokuguqulwa kwaso. Ngemva konyaka lowo mhla wokugcina, iSpain yayingakaqedi ukufakwa ngokusemthethweni ohlelweni lwayo lwezomthetho lwangaphakathi, okwayibeka eqenjini lamazwe asalele emuva.

Ngenxa yalokhu kubambezeleka, iKhomishini yaseYurophu yavula amacala okwephula umthetho ngokumelene namazwe amaningi angamalungu. Ngomhlaka-7 Meyi 2025, iKhomishini yathumela umbono onengqondo emazweni ayishumi nesishiyagalolunye, okuhlanganisa neSpain, ewadinga ukuba azise ngokuguqulwa okugcwele kweSiqondiso zingakapheli izinyanga ezimbili, ngaphansi kwesixwayiso sokuthi ingadlulisela udaba eNkantolo Yobulungiswa ye-EU uma kungathathwanga zinyathelo ezidingekayo.

Endabeni yaseSpain, ushintsho olukhulu lwenzeka ngoJanuwari 14, 2025, ngokuvunyelwa yiKhansela labaNgqongqoshe boMthetho Osalungiswa Wokuxhumanisa Nokuphatha Kwezokuphepha Kwe-inthanethi . Lo mthetho uzosebenza njengethuluzi eliyisisekelo lokuguqula i-NIS2 ibe ngumthetho wasekhaya kanye nokuhlela kabusha imodeli kazwelonke yokuphatha ukuphepha kwe-inthanethi.

Ngemva kokuvunyelwa kokuqala, umthethosivivinywa ohlongozwayo wenziwa watholakala ukuze kuxoxiswane ngawo nomphakathi futhi ubuyekezwe phakathi kukaJanuwari 16 noFebhuwari 10, 2025 , okuvumela izakhamuzi, amabhizinisi, izinhlangano, kanye nezinye izinhlangano ukuthi zithumele imibono neziphakamiso zokuthuthukisa. Ngemva kwalokho, umbhalo wabuyekezwa yi-Interministerial Technical Working Group, eyahlanganisa lo mbhalo ngokubheka impendulo etholiwe, okuhlanganisa naleyo evela emiphakathini yochwepheshe njenge-ISMS Forum.

Noma kunjalo, naphezu komfutho wezepolitiki, lo mthetho usaqhubeka enkambisweni yephalamende . Kube nokukhulunywa ngokulethwa kwawo kuMkhandlu Wongqongqoshe ukuze uvunywe njengomthethosivivinywa cishe ngoNovemba kanye nokuvunyelwa okungenzeka kwephalamende ekupheleni kukaJanuwari noma uFebhuwari wonyaka olandelayo, kodwa iqiniso liwukuthi, kuze kube sekupheleni kuka-2025, iSpain isasenawo umthetho kazwelonke osebenza ngokugcwele ochaza i-NIS2.

Umthetho Osalungiswa Ku-Cybersecurity Coordination kanye Nokuphatha

Umthethosivivinywa owuhlaka ovunywe nguHulumeni waseSpain uwuhlelo oluhlangene loNgqongqoshe Bezangaphakathi, Ezokuvikela, kanye Nokuguqulwa Kwedijithali kanye Nokuphathwa Komphakathi . Inhloso yawo ikabili: okokuqala, ukuhumusha i-NIS2 Directive, futhi okwesibili, ukuhlela ukuhlanganiswa kanye nokuphathwa kokuphepha kwe-cyber ezingeni likazwelonke, ukuqinisa ukuvikelwa kwamanethiwekhi nezinhlelo zolwazi ezinsongweni ze-cyber ezingathinta ingqalasizinda ebalulekile kanye nezinsizakalo ezibalulekile.

Umthetho wesikhathi esizayo uzosebenza ezinhlanganweni zomphakathi nezizimele ezisebenza emikhakheni efana nezamandla, ezokuthutha, ingqalasizinda yemakethe yamabhange neyezezimali, ukunakekelwa kwempilo, ukuphathwa kwamanzi, ingqalasizinda yedijithali, izinsizakalo zobuchwepheshe, kanye neminye imikhakha ebalulekile . Ufaka ngokusobala amarejista egama lesizinda , njengeDominios.es (ephethwe yiRed.es), ezothatha izibopho ezintsha zokuphepha kwe-cyber ngenxa yendima yayo yamasu ekuzinzeni kwendalo yedijithali.

Ngokuvamile, lolu hlaka luhambisana nezibopho eziyinhloko ze-NIS2 Directive futhi luchaza izinhlaka ezine ezibalulekile: ukuqinisa ukubusa kanye nomthwalo wemfanelo wabaphathi abaphezulu, izinyathelo zokuphatha izingozi zokuphepha ezijwayelekile, ukuqokwa kwesikhulu sezokuphepha kolwazi kanye nezibopho ezicacile zokubika izehlakalo.

Ngaphezu kwalokho, umthetho waseSpain wethula isici esibalulekile senhlangano: ukudalwa kweNational Cybersecurity Center (CNC) . Lo mzimba uzosebenza njengomzimba oxhumanisayo wokuvikela amanethiwekhi nezinhlelo zolwazi, uvumelanise izindlela phakathi kweziphathimandla ezahlukene zokulawula (Izangaphakathi, Ezokuvikela, kanye Nokuguqulwa Kwedijithali), ukukhuthaza Amathimba Okuphendula Izehlakalo Zokuphepha Kwamakhompyutha (ama-CSIRT), kanye nokwenza kube lula umbono ohlangene wesistimu yezwe yokuphepha kwe-cyber.

Ngesikhathi sesigaba sokuxoxisana nomphakathi, izinhlangano ezifana ne-ISMS Forum zenze iminikelo ebalulekile : ukuqinisa indima yesikhulu sokuphepha kolwazi, ukuhlukanisa lesi sikhundla noMthetho Wokuphepha Kwangasese, kanye nokusungula izindlela ezithile zokuphendula lapho inhlangano engalandeli imithetho iyisiphathimandla sikahulumeni, esingenajeziswa ngokwezimali, ngokwemvelo yaso. Phakathi kweziphakamiso kukhona ithuba lezixwayiso zomphakathi, ngokuhambisana nezinhlinzeko ze-LOPDGDD (uMthetho Wemvelo Wokuvikelwa Kwedatha Yomuntu Siqu kanye Nesiqinisekiso Samalungelo Edijithali) mayelana nokuvikelwa kwedatha.

Imikhakha nezinhlobo zamabhizinisi athintwa i-NIS2

I-NIS2 ihlukanisa izinhlangano ezingaphansi kweSiqondiso njengezinhlangano ezibalulekile noma ezibalulekile , ngokuyinhloko ngokusekelwe emkhakheni ezisebenza kuwo kanye nosayizi wazo (izinkampani eziphakathi nezinkulu, ngaphandle kokucatshangelwa okusekelwe ekubalulekeni). Le nqubo ngokuvamile isebenza ezinhlanganweni zomphakathi noma ezizimele ezisebenza e-EU, kanye nokwenzeka kokufaka izinhlangano ezincane lapho amazwe angamalungu ezibona njengezibalulekile noma ezibalulekile ngenxa yokufaneleka kwazo.

Imikhakha ebaluleke kakhulu ibhalwe ku -Annex I ye-NIS2, kanti eminye imikhakha ebalulekile ibhalwe ku- Annex II . ESpain, ukwanda kwenani lemikhakha kuncane kakhulu kunakwamanye amazwe, ngoba ukuguqulwa kwe-NIS endala kwase kuvele kuhambisana noMthetho 8/2011 wokuvikelwa kwengqalasizinda ebalulekile, owawuhlanganisa imikhakha eyi-12. Noma kunjalo, i-NIS2 ihlanganisa izindawo ezintsha ezifana nezinsizakalo zeposi nezeposi, ukuphathwa kwemfucuza, kanye nezigaba eziningana zokukhiqiza , futhi ihlukanisa ezinye, isibonelo, ukuhlukanisa phakathi kwamanzi okuphuza namanzi angcolile.

Phakathi kwemikhakha nezibonelo zezinhlangano , okulandelayo kuyagqama:

• AmandlaIzinkampani ezihlinzeka ngogesi, abaphathi benethiwekhi yezokuthutha nokusabalalisa, abakhiqizi, abaqhubi be-NEMO, abahlanganyeli bemakethe kagesi, abaqhubi bezindawo zokushaja; igesi, uwoyela kanye ne-hydrogen network opharetha kanye nabaphathi.
• Ukuthutha: izinkampani zezindiza, abaqhubi besikhumulo sezindiza, ukulawula ukuhamba kwezindiza, abaphathi bengqalasizinda kaloliwe, izinkampani zikaloliwe, izinhlangano zezokuthutha zasolwandle nasemifuleni, abaqhubi bamachweba, izinsizakalo zethrafikhi yemikhumbi, iziphathimandla zemigwaqo kanye nabaqhubi bezinhlelo zokuthutha ezihlakaniphile.
• Ingqalasizinda yamabhange kanye nezimakethe zezimali: izikhungo zezikweletu nabaphathi bezikhungo zokuhweba, izinkampani ezimaphakathi, ezinombono wokuthi i-DORA isebenza njengezinga elithile lomkhakha.
• Umkhakha wezokunakekelwa kwempilo: abahlinzeki bezempilo, amalabhorethri ayinkomba e-EU, izinhlangano ze-R&D zemithi, abakhiqizi bemikhiqizo yemithi eyisisekelo nekhethekile, nabakhiqizi bemishini yezokwelapha ebalulekile ezimeni eziphuthumayo zezempilo zomphakathi.
• Amanzi okuphuza namanzi angcolileAbahlinzeki nabasabalalisi bamanzi okuphuza, nezinkampani ezinomthwalo wemfanelo wokuqoqwa, ukulahlwa kanye nokwelashwa kwamanzi angcolile asemadolobheni, asekhaya noma ezimbonini.
• Ingqalasizinda yedijithaliAbahlinzeki bephoyinti lokushintshisana nge-inthanethi (IXP), amasevisi e-DNS, okubhaliswa kwesizinda esiphezulu, abahlinzeki besevisi yekhompuyutha yamafu, izikhungo zedatha, amanethiwekhi okulethwa kokuqukethwe (ama-CDN), abahlinzeki besevisi abathenjwayo, abahlinzeki benethiwekhi yomphakathi yezokuxhumana ngogesi, nezinsizakalo zokuxhumana ngogesi zomphakathi.
• Ukuphathwa kwesevisi ye-ICT yebhizinisi kuya kwebhizinisi: abahlinzeki besevisi abaphethwe nabahlinzeki besevisi yezokuphepha abaphethwe, abanomthelela oqondile kulo lonke uchungechunge lokuhlinzeka ngobuchwepheshe.
• Ukuphathwa komphakathi: amabhizinisi Okuphathwa Kwezwe Okujwayelekile futhi, kwezinye izimo, amabhizinisi esifunda nawendawo, lapho ukuphazamiseka kwamasevisi awo kungase kube nomthelela omkhulu emisebenzini yomphakathi noma yezomnotho ebalulekile.
• Izinsiza zeposi nezokuthumela izincwadi: abahlinzeki abenza ukuqoqa, ukuhlunga, ukuthutha kanye nokusabalalisa ukuthunyelwa kweposi.
• I-Gestión de residuos: izinkampani ezizinikele ekuqoqweni, ezokuthutha, ekubuyiseni nasekulahleni imfucuza, okuhlanganisa nezindawo zokulahla imfucumfucu.
• Amakhemikhali: izinkampani ezikhiqiza, ezikhiqiza futhi zisabalalisa izinto zamakhemikhali nezingxube, futhi zikhiqize ama-athikili kuzo.
• Ukukhiqizwa, ukucubungula kanye nokusatshalaliswa kokudla: izinkampani zokudla ezizinikele ekusabalaliseni ama-wholesale kanye nokukhiqizwa nokucubungula kwezimboni ezinkulu.
• Ukukhiqiza okuthuthukile: abakhiqizi bemikhiqizo yezempilo kanye nokuxilongwa kwe-in vitro, abakhiqizi bekhompuyutha, imikhiqizo kagesi kanye ne-optical, okokusebenza kukagesi, imishini nemishini, izimoto nezinye izinto zokuhamba.
• Umkhakha womkhathi: opharetha bengqalasizinda yasemhlabeni abasekela ukunikezwa kwamasevisi asemkhathini, ngaphandle kwalabo ubunikazi babo noma ukuphatha okuhambisana ne-EU noma izinkampani zangaphandle ngaphakathi kohlaka lohlelo lwayo lwasemkhathini.

Kuzo zonke lezi zinhlaka, izinhlangano ezinkulu ngokuvamile zihlukaniswa njengezibalulekile , kuyilapho izinhlangano eziphakathi nendawo zivame ukuba ezibalulekile, ngaphandle kokuthi zichazwe ngenye indlela. Amabhizinisi amancane namancane ngokuvamile ayakhishwa ngenxa yobukhulu bawo, kodwa angafakwa uma ubucayi bawo bukuvumela lokho.

Ukubusa kanye nezibopho zokuphatha eziphezulu

Enye yezinguquko ezibaluleke kakhulu ku-NIS2 kanye nomthetho ohlongozwayo waseSpain ukugcizelela ekuphathweni kokuphepha kwe-inthanethi kanye nomthwalo wemfanelo oqondile wezinhlangano ezibusayo . Isigaba 14 somthetho ohlongozwayo siqinisa lo mbono: ukuphepha kwe-inthanethi akuseyona indaba yobuchwepheshe kuphela, kodwa kunalokho kuyindaba yamasu esezingeni eliphezulu.

Abaphathi abaphezulu kumele bavume futhi baqaphe ukuqaliswa kwezinyathelo zokuphathwa kwezingozi zokuphepha kwe-inthanethi , baqinisekise ukuthi ziyahambisana nomongo wenhlangano kanye nezingozi ezitholakele. Ngaphezu kwalokho, izinhlangano ezibusayo zizothwala umthwalo wemfanelo wokugcina nganoma yikuphi ukungalandeli imithetho, okuxhumanisa nohlelo oluthuthukisiwe lwezijeziso.

Elinye iphuzu elibalulekile ukuqeqeshwa njalo kwezokuphepha kwe-inthanethi kwabaphathi . Ukunikeza abanye imisebenzi akwanele: abaholi kumele baqeqeshwe ukuqonda izingozi, benze izinqumo ezinolwazi, futhi basekele ukusabalala kwesiko eliqinile lezokuphepha kuyo yonke inhlangano. Futhi, bazoba nesibopho sokukhuthaza izinhlelo zokuqeqesha ezivamile zabanye abasebenzi.

I-Athikili 20 ye-NIS2 igcizelela lo mbono ngokudinga ngokucacile izigungu ezibusayo ukuthi zazi ngezibopho zazo, zigunyaze izinyathelo, ziqinisekise ukuqaliswa kwazo futhi zikwazi ukuphendula, ezimweni ezimbi kakhulu, ngisho nemiphumela yomuntu siqu (njengokuhlukaniswa okungenzeka kwemisebenzi ezimeni ezithile).

Kulesi simo, ubudlelwano phakathi kwabaphathi kanye nesikhulu sokuphepha kolwazi (i-CISO noma esilingana nayo) buba yinto ebalulekile: ingxoxo eguquguqukayo neqhubekayo esekelwe ezimisweni zobungozi obungakhethi kanye nokuhambisana nomthetho kulindeleke.

Izinyathelo zokulawula ubungozi ezidingwa yi-NIS2

Isigaba 15 somthetho ohlongozwayo waseSpain sinquma ukuthi izinyathelo zokuphathwa kwezingozi zokuphepha kwe-inthanethi kumele zisekelwe ezindinganisweni zobuchwepheshe zikazwelonke, zaseYurophu nezamazwe ngamazwe , zihlanganise, okungenani, izidingo ezibekwe ku-Athikili 21 ye-NIS2 futhi zathuthukiswa ku-Implementing Regulation (EU) 2024/2690.

Phakathi kwezinyathelo okumele izinhlangano ezibalulekile nezibalulekile zizisebenzise , ​​okulandelayo kuyagqama:

• Izinqubomgomo zokuphepha nokuhlaziya ubungozi wezinhlelo zolwazi, nokubuyekezwa ngezikhathi ezithile.
• Ukuphathwa kwesigameko, okuhlanganisa ukutholwa okucacile, ukusabela kanye nezinqubo zokuthola kabusha.
• Ukuqhubeka kwebhizinisi, izipele, ukutakula kwezinhlekelele, nokulawulwa kwezinhlekeleleukuqinisekisa ukuqina kokusebenza.
• Ukuphepha kwe-Supply chain kanye nobudlelwano nabahlinzeki kanye nabahlinzeki bezinsizakalo eziqondile, okubandakanya ukubeka izidingo zenkontileka kanye nokulawulwa kokugunyazwa nokucwaninga.
• ukuphathwa kobungozi ekutholeni, ekuthuthukisweni nasekulondolozeni amanethiwekhi nezinhlelo zolwazi, okuhlanganisa neziqephu nezibuyekezo.
• Izinqubomgomo zokuhlola ukusebenza kwezinyathelo zokuphepha ku-inthanethingokusebenzisa ukucwaninga, amamethrikhi, nokubuyekezwa ngezikhathi ezithile.
• Izindlela eziyisisekelo zokuhlanzeka ku-inthanethi nokuqeqeshwa yabasebenzi, eguqulelwe kumaphrofayili ahlukene.
• Izinqubomgomo ze-Cryptography nezokubethela ukuqinisekisa ukugcinwa kuyimfihlo kanye nobuqotho bolwazi.
• Ukuphepha KwabasebenziUkulawula ukufinyelela nezinqubomgomo zokuphathwa kwempahla.
• Ukufakazela ubuqiniso kwezinto eziningi noma okuqhubekayo, ukuvikelwa kokuxhumana ngezwi kanye nokuxhumana okuphuthumayo.

ESpain, eziningi zalezi zinyathelo zase zifakiwe kakade ku- National Security Framework (ENS) , ikakhulukazi kohulumeni bomphakathi kanye nabaphakeli babo. Eqinisweni, i-State Agency for Digital Administration kanye ne-National Cryptologic Center zinikeze i-EU ukuhambisana okuqinile kwe-ENS ne-NIS2, ziqokomisa amandla ayo njengesilinganiso saseYurophu kanye negalelo layo ekuqineni kwesistimu yezwe yedijithali.

Kodwa-ke, i-NIS2 iphakamisa izinga lezinhlangano eziningi, kufaka phakathi ama-SME athintekile ngobukhulu noma ukugxekwa . Ezinhlanganweni ezivuthiwe, eziningi zalezi zidingo zihambisana nemikhuba ekhona; ezinkulungwaneni zezinkampani ezingenalo ulwazi lokuphepha kwe-cyber, zimelela igxathu elikhulu ekuvuthweni, izinsizakusebenza, kanye nenhlangano yangaphakathi.

Isikhulu Esiphezulu Sezokuphepha Kolwazi (CISO) kanye nemisebenzi yabo

Isigaba 16 somthethosivivinywa ohlongozwayo siqinisekisa ukuthi zonke izinhlangano ezibalulekile nezibalulekile kumele ziqoke isikhulu sokuphepha kolwazi . Le ndima, ephefumulelwe ulwazi lwangaphambilini lweSpain nge-NIS yokuqala, iba yindawo ebalulekile yokuxhumanisa konke okuhlobene nokuvikelwa kwezinhlelo nedatha.

Imisebenzi yayo eyinhloko ihlanganisa:

• Chaza futhi usebenzise isu lenhlangano le-cybersecurity, ehambisana nezingozi, izibopho zebhizinisi nokulawula.
• Linganisa, nciphisa, futhi ubuyekeze ubungozi ngokuqhubekayo, ukugcina umbono wakamuva wokuchayeka kwebhizinisi.
• Phatha ubufakazi, izinqubomgomo, namarekhodi adingekayo ukuze ubonise ukuthobelana wezibopho ezivela ku-NIS2 kanye nemithetho kazwelonke.
• Thuthukisa isiko le-cybersecurity ngokubambisana nabaphathi abaphezulu, ukuqeqeshwa kanye nokuqwashisa bonke abasebenzi.
• Qinisekisa ukuthobela izibopho zokubika isigameko, ukuxhumanisa imibiko kuziphathimandla ezinekhono.

ISpain yayingelinye lamazwe okuqala ukwethula ngokusobala indima yeSikhulu Esiphezulu Sokuphepha Kolwazi (i-CISO) ekushintsheni i-NIS yangaphambili. Kodwa-ke, ulwazi lubonise ukuthi inani elikhulu labasebenzi ababalulekile alikaze liqoke ngokusemthethweni le ndima futhi, noma kunjalo, alizange lijeziswe. I-NIS2, ehlanganiswe nomthetho waseSpain wesikhathi esizayo kanye nohlelo lwezinhlawulo eziqinile, ifuna ukulungisa lokhu kuxega futhi inike i-CISO isikhundla esiqinile nesiqashelwayo.

Uma sibheka phambili, kulindeleke ukwanda okukhulu kwezinhlangano ezinesibopho : kusukela kubasebenzi ababalulekile abacishe babe ngu-400 kuya kumabhizinisi abalulekile nabalulekile alinganiselwa ku-5.000 kuya ku-50.000. Lokhu kuzosho isidingo esikhulu sochwepheshe bezokuphepha kwe-inthanethi, kokubili ngaphakathi nangaphandle, ikakhulukazi kuma-SME angakaze abe nale ndima ngaphambili.

Ukubikwa kwezigameko kanye nezibopho zokuphatha ubungozi

Isiqondiso se-NIS2 sibeka ukubaluleka okukhulu ekwazisweni kwangesikhathi kwezigameko zokuphepha ezinomthelela omkhulu . Isigaba 18 somthetho ohlongozwayo waseSpain sichaza kabanzi ngalesi sibopho, sihambisana nezikhathi kanye nokuqukethwe okusungulwe yiSiqondiso.

Uma ibhizinisi libhekene nesigameko esingadala ukuphazamiseka okukhulu ekuhlinzekweni kwezinsizakalo zalo noma umonakalo omkhulu kulo noma kubantu besithathu, kumele lilandele uhlelo lokubika olulandelayo:

• Isaziso sokuqala: kungakapheli amahora angama-24 ngemuva kokutholwa kwesigameko, kuhlinzeka ngolwazi oluyisisekelo olutholakalayo.
• Umbiko wesikhashana: ngaphakathi kwesilinganiso samahora angu-72 kusukela ekutholweni, ngokuhlolwa kokuqala komthelela nobukhulu.
• Umbiko wokugcina: phakathi nesikhathi esiphezulu senyanga eyodwa kusukela kusaziso sokuqala, okuhlanganisa nencazelo enemininingwane yesigameko, umthelela waso, ubukhali kanye nezinyathelo ezithathiwe.

Ngaphezu kwalokho, i-NIS2 iqinisa ukuphathwa kobuthakathaka kanye nokuxhumana : akugcini nje ngokubika izehlakalo eziqediwe, kodwa futhi nokwabelana ngolwazi olufanele mayelana nobuthakathaka obungaba nomthelela ohlelweni, okwenza kube lula ukuhlanganiswa kwezimpendulo emazingeni kazwelonke nawaseYurophu.

ESpain, uhlelo lokuphendula luthembele kuma -CSIRT amathathu amakhulu okubhekisela kuwo : i-CCN-CERT (yokuphatha umphakathi, izinkampani zamasu, kanye nezinhlelo ezihlukanisiwe), i-INCIBE-CERT (imboni ezimele kanye nezakhamuzi), kanye ne-MCCE (imboni yezokuvikela). Lokhu kuhambisana nenethiwekhi ye-csirt.es, ehlanganisa amaqembu amaningi akhethekile futhi ixhumanisa namanethiwekhi omhlaba wonke njenge-FIRST, kanye ne-National SOC Network.

Izinhlangano ezibalulekile nezibalulekile kumele zibike izehlakalo zazo kuma-CSIRT afanele , ngokuhambisana nemithethonqubo yomkhakha kanye neziqondiso ze-National Cybersecurity Centre yesikhathi esizayo, ezosebenza njengesici esixhumanisayo kanye nokuxhumana ne-ENISA kanye namanye amazwe angamalungu.

Umbuso weSanctions kanye nengcindezi yaseYurophu

Isiqondiso se-NIS2 sisungula uhlelo lwesijeziso oluqinile kakhulu kunesiqondiso sangaphambilini se-NIS . Kumabhizinisi abalulekile, ukwephulwa okukhulu kakhulu kungaholela ezinhlawulweni ezifika ku-€10 million noma u-2% wenzuzo yomhlaba wonke yeqembu, kuyilapho kumabhizinisi amakhulu, izinhlawulo zingafinyelela ku-€7 million noma u-1,4% wenzuzo yomhlaba wonke.

Njengamanje, azikho izijeziso ezisekelwe ku-NIS2 ezibonwe eSpain , ngokwengxenye ngoba umthetho wokuguqulwa kwesimo awukasebenzi futhi igunya lokuphatha alikakamiswa ngokusemthethweni. Kwamanye Amazwe Angamalungu, ukuguqulwa kwesimo kusanda kwenzeka, ngakho-ke kusesenesikhathi kakhulu ukulindela izijeziso ezisabalele.

Noma kunjalo, ochwepheshe bayavuma ukuthi lapho amazwe afana neFrance noma iJalimane eqala ukusebenzisa izijeziso , iSpain ayikwazi ukusala ngemuva uma ifuna ukugcina ukuvumelana nokwethembeka ezingeni laseYurophu. Ingcindezi yeKhomishini, ngezinqubo zokwephulwa kwemithetho kanye nemibono enengqondo, ihlose ukufeza lokhu.

Ngaphezu kwezijeziso zezimali, i-NIS2 yethula ngokusobala, okokuqala ngqa, umthwalo wemfanelo wabaphathi abaphezulu kwezokuphepha kwe-inthanethi . Ukungaxhumani phakathi kwabaphathi ne-CISO akuseyona inketho: indikimba ebusayo kumele ihileleke, inolwazi, futhi yenze izinqumo ezidingekayo.

Inselele enkulu kunazo zonke, ngokusho kochwepheshe abafana nalabo abase-ISMS Forum, ingaphakathi kwenethiwekhi yama-SME, ngaphandle kokuqaphela ngokugcwele, azoboshwa yi-NIS2 . Amaningi antula izinsiza ezanele, izinqubo, noma isiko lokuphepha kwe-cyber, futhi "azocindezelwa" kokubili ngumthetho kanye nezidingo zamakhasimende awo amakhulu ochungechungeni lokuhlinzeka, okuzodingeka afune iziqinisekiso zenkontileka ukuze ahambisane neSiqondiso.

Ukusekela imizamo, izifundo kanye nendima ye-ENS

Kanye nenqubekela phambili yezomthetho, iSpain ikhuthaza izinhlelo zobuchwepheshe nolwazi ukuze kube lula ukuzivumelanisa nomkhakha webhizinisi ne-NIS2. I-ISMS Forum, isibonelo, isebenza ocwaningweni lomthelela we-NIS2 ezinkampanini zaseSpain, ngaphansi koSihlalo Ovelele Wokuphepha Kwe-inthanethi Nokuvikelwa Kwedatha e-UCM.

Lo msebenzi unenhloso ekabili: ukwakha ukubalwa kwabantu okungekho emthethweni kwezinkampani ezithintwe yi-NIS2 kanye nokukala izinga lokuvuthwa kwazo kwezokuphepha kwe-inthanethi. Esigabeni sokuqala, ukubalwa kwabantu kuzohlanganiswa kusetshenziswa izizindalwazi eziphelele (ukubhaliswa kwezentengiselwano, i-DIRCE/INE, izizindalwazi ezithile zomkhakha, njll.), kanye nemiphumela elindeleke cishe ngoNovemba 2025. Esigabeni sesibili, uhlu lwemibuzo olufushane luzothunyelwa kusampula emele izinkampani (ezihlose izimpendulo eziyi-1.000) ukuze kuhlolwe izinga lazo lokulungela, kanye nemiphumela elindeleke ngoMeyi 2026.

Ukuhlaziywa kuzofaka phakathi ukuhlukaniswa ngokwemikhakha, usayizi, ukusatshalaliswa kwendawo kanye nohlobo lwenhlangano (ebalulekile noma ebalulekile) , ukwethula iziphetho embikweni ophelele wabaphathi, ngaphandle kwedatha yomuntu ngamunye, okhonza izinkampani kanye neziphathimandla.

Ngesikhathi esifanayo, izinhlangano ezifana ne-ISMS Forum kanye nezinhlangano zomphakathi ezahlukahlukene zenza imicimbi yokufinyelela abantu ezweni lonke , zigxile kakhulu kuma-SME. Umgomo "ukushumayela ivangeli," ukuchaza ngokucacile ukuthi i-NIS2 isho ukuthini, kungani ukuba ne-CISO (yangaphakathi noma yangaphandle) kubalulekile, ukuthi ungazichaza kanjani izinqubomgomo zokuphepha kwe-cyber eziyisisekelo, nokuthi ungalungiselela kanjani umthetho wesikhathi esizayo kanye nemithetho yawo eyengeziwe.

Ngokwemithetho eqinile, i- National Security Framework (ENS) ibekwe eYurophu njengenye yamandla amakhulu eSpain . I-State Agency for Digital Administration kanye ne-National Cryptologic Center (CCN) babelane ngolwazi oluqoqiwe lwe-ENS, amaphrofayili ayo okuthobela imithetho, kanye nokuhlanganiswa kwayo nezinhlelo zesitifiketi zaseYurophu ze-Regulation (EU) 2019/881 (Cybersecurity Act) ne-NIS2 Cooperation Group. Ukwamukelwa okuhle kwalesi sethulo kuqinisa isithombe seSpain njengomlingisi ozimisele ozinikele ekuphepheni kwe-cyber okuqinile, okuhlangene, nokuvumelanayo.

Kulesi simo, ukuzivumelanisa kweSpain ne-NIS2 kubhekana nokucindezeleka kwezinsuku zokugcina, ukuqina kobuchwepheshe kwezinsimbi ezifana ne-National Security Scheme (ENS), kanye nenselele enkulu yokufaka izinkulungwane zezinhlangano ezintsha esikweni elithuthukisiwe lokuphepha kwe-cyber. Izinhlangano eziya phambili, zenze ukuhlolwa kwesimo, futhi ziqale ukuvumelanisa imikhuba yazo ne-Directive manje zizoba sesimweni esingcono sokunciphisa izingozi, zigweme izinhlawulo zesikhathi esizayo, futhi zibonise indlela ephumelelayo nevuthiwe yokubhekana nezinsongo ze-cyber.