Ukuqaliswa komyalelo we-NIS2 e-Spain: isimo, izibopho nezinselele

Informatec Digital » Izinsiza » Ukuqaliswa komyalelo we-NIS2 e-Spain: isimo, izibopho nezinselele

La I-European Directive NIS2 iyisuse ngokuphelele i- i-cybersecurity landscape eYurophu futhi, ikakhulukazi, eSpain. Lokhu akuwona nje omunye umthethonqubo, kodwa uguquko emithethweni ethinta indlela izinkampani nabaphathi bomphakathi abaphatha ngayo ubungozi bedijithali, babike izigameko, futhi baxhumane neziphathimandla.

Okwamanje, ISpain yenza inqubekelaphambili kancane, kodwa kusobala ukuthi isemva kwesimiso. Ekuguquleni kwawo: umnqamulajuqu osemthethweni kwakungu-Okthoba 2024, futhi kuze kube namuhla, ikusasa le-Cybersecurity Coordination and Governance Law usaqhuba izinqubo zephalamende. Lo mongo udala isimo esingavamile: I-Directive isivele ibophezela ezingeni laseYurophu, kodwa uhlaka lwezomthetho lukazwelonke oluqinisekile alukakagunyazwa, okushiya izinhlangano eziningi zinesibopho sokuziphatha namasu sokulungiselela nokuhlola isimo sazo. hlola isimo sakho kanye nokungabikho komthetho osebenza ngokugcwele.

Iyini i-NIS2 Directive futhi kungani ishintsha imithetho yegeyimu?

I-Directive (EU) 2022/2555, eyaziwa nge-NIS2Ingena esikhundleni se-NIS Directive yasekuqaleni ngenhloso yokusungula izinga eliphezulu elifanayo lokuvikeleka ku-inthanethi kumanethiwekhi nezinhlelo zolwazi kuyo yonke i-European Union. Inhloso yawo ukuqinisa ukuqina ngokumelene nezigameko ze-cyber okungase kuthinte izinsiza ezibalulekile kanye nokusebenza okuvamile komphakathi kanye nomnotho.

Ngokungafani nowandulelayo, I-NIS2 inweba kakhulu inani lemikhakha ethintekile namabhizinisiokungahlanganisi kuphela ingqalasizinda ebalulekile yendabuko (amandla, ezokuthutha, amanzi, amabhange noma ezempilo), kodwa nezindawo ezifana nokuphathwa komphakathi, ingqalasizinda yedijithali, izinsizakalo zeposi nezincwadi, ukuphathwa kukadoti, ukukhiqizwa okuthuthukisiwe noma ukukhiqizwa nokusatshalaliswa kokudla.

I-Directive iyasungula uhlaka oluvumelanisiwe lwezidingo ezincane zokuphepha ku-inthanethi Kuyo yonke i-EU, ihlanganisa izinyathelo zokulawulwa kwezinhlekelele, ukubusa, ukuvikelwa kochungechunge lokuhlinzekwa kwempahla, ukuqhubeka kwebhizinisi, nokubikwa kwezigameko zangaphambi kwesikhathi. Iphinde iqinise uhlelo lokuqondisa kanye nezijeziso futhi ikhulise ngokusobala ukuziphendulela kwabaphathi abaphezulu.

Enye intuthuko entsha efanele ukuzibophezela okucacile ku ukubambisana phakathi kwaMazwe Angamalungu kanye nokudalwa noma ukuqinisa amaqembu okuphendula isigameko (CSIRT) izinhlangano zikazwelonke, ezikwazi ukuxhumanisa ezingeni laseYurophu lapho kubhekene nezinkinga ezinkulu. I-ENISA, i-EU Agency for Cybersecurity, idlala indima ebalulekile kulesi simiso sezinto eziphilayo, isekela ukuthuthukiswa kwamasu kazwelonke okuphepha ku-inthanethi kanye nokukhuthaza izinqubo ezihamba phambili.

Umkhakha wezezimali awufakiwe kububanzi be-NIS2 Empeleni, imithetho ye-DORA isetshenziswa ngokukhethekile njenge-lex specialis. Noma kunjalo, umqondo wokusimama kokusebenza kwedijithali oshayela i-DORA uhambisana ngokugcwele nefilosofi ye-NIS2.

Isimo samanje sokuguqulwa kwe-NIS2 e-Spain

I-NIS2 Directive Iqale ukusebenza ngoJanuwari 16, 2023 futhi yabeka u-Okthoba 17, 2024 njengomnqamulajuqu wokuguqulwa kwayo. Ngonyaka owodwa ngemva kwalowo mnqamulajuqu, iSpain yayingakaqedi ukufakwa ngokusemthethweni ohlelweni lwayo lwangaphakathi lwezomthetho, okuyibeka eqenjini lamazwe asalele.

Ngenxa yalokhu kubambezeleka, I-European Commission ivule amacala okuphula umthetho ngokumelene namaZwe amaningi Angamalungu. Ngomhla ziyisi-7 kuNhlaba wezi-2025, iKhomishana yathumela umbono onengqondo emazweni ayishumi nesishiyagalolunye, kuhlanganise neSpain, iwadinga ukuba azise ukuguqulwa okugcwele koMyalelo zingakapheli izinyanga ezimbili, ngaphansi kwesexwayiso sokuthi ingayisa lolu daba eNkantolo Yobulungisa ye-EU uma izinyathelo ezidingekayo zingamukelwanga.

Endabeni yeSpanishi, ukuguqulwa okukhulu kwenzeka Janawari 14, 2025 ngemvume, kuMkhandlu Wongqongqoshe, Womthetho Osalungiswa Wokuxhumanisa Nokuphathwa Kwe-CybersecurityLeli zinga lizosebenza njengethuluzi elibalulekile lokudlulisela i-NIS2 emthethweni wasekhaya futhi lihlele kabusha imodeli yokuphatha kuzwelonke ekuvikelekeni ku-inthanethi.

Ngemva kokugunyazwa kwayo kokuqala, uhlaka lokuqala lwathunyelwa ku ukulalelwa komphakathi nolwazi phakathi kukaJanuwari 16 noFebruwari 10, 2025ukuvumela izakhamizi, amabhizinisi, izinhlangano, nezinye izinhlangano ukuthi zithumele imibono neziphakamiso ukuze zithuthukiswe. Ngokulandelayo, umbhalo wabuyekezwa IQembu Lokusebenza Lobuchwephesha Bezongqongqoshe, elihlanganise uhlaka kucatshangelwa impendulo eyamukelwe, okuhlanganisa naleyo evela emiphakathini yongoti efana neForamu ye-ISMS.

Noma kunjalo, naphezu komfutho wezepolitiki, Umthetho usaqhubeka nePhalamende.Kuke kwaba nenkulumo yokuwuhambisa eMkhandlwini Wongqongqoshe ukuze ugunyazwe njengomthethosivivinywa cishe ngoNovemba kanye nokugunyazwa okungenzeka kwephalamende ekupheleni kukaJanuwari noma ngoFebhuwari wonyaka olandelayo, kodwa iqiniso liwukuthi, kuze kube sekupheleni kuka-2025, iSpain namanje ayinawo umthetho kazwelonke osebenza ngokugcwele odlulisa i-NIS2.

Umthetho Osalungiswa Ku-Cybersecurity Coordination kanye Nokuphatha

Uhlaka lokuqala oluvunywe uHulumeni waseSpain Kuwuhlelo oluhlanganyelwe loMnyango Wezangaphakathi, Wezokuvikela kanye Nokuguqulwa Kwedijithali kanye Nokuphathwa KomphakathiUmsebenzi wayo ukabili: ngakolunye uhlangothi, ukudlulisa i-NIS2 Directive, kanti ngakolunye, uku-oda ukuhlotshaniswa nokulawulwa kokuphepha kwe-cybersecurity ezingeni likahulumeni, ukuqinisa ukuvikelwa kwamanethiwekhi kanye nezinhlelo zolwazi ngokumelene nezinsongo ze-inthanethi ezingase zibe nomthelela kwingqalasizinda ebalulekile kanye nezinsizakalo ezibalulekile.

Umthetho wesikhathi esizayo uzosebenza ku Izinkampani zikahulumeni nezizimele ezisebenza emikhakheni efana nezamandla, ezokuthutha, ingqalasizinda yamabhange kanye nezimakethe zezimali, ezempilo, ukuphathwa kwamanzi, ingqalasizinda yedijithali, izinsizakalo zobuchwepheshe kanye neminye imikhakha ebalulekile.Ihlanganisa ngokucacile i- ukubhaliswa kwegama lesizinda, njenge-Dominios.es (ephethwe i-Red.es), manje esezithatha izibopho ezintsha zokuphepha ku-inthanethi ngenxa yendima yazo yamasu ekuzinzeni kwe-ecosystem yedijithali.

Ngokuvamile, uhlaka lokuqala Ihambisana nezibopho eziyinhloko ze-NIS2 Directive futhi iveza izimbazo ezine ezibalulekile: ukuqinisa ukubusa kanye nesibopho sabaphathi abaphezulu, izinyathelo zokulawula ubungozi ezivamile, ukuqokwa kwesikhulu sezokuphepha solwazi kanye nezibopho ezicacile zokubika izigameko.

Ngaphezu kwalokho, umthethonqubo waseSpain wethula into ebalulekile yenhlangano: ukwakhiwa kweNational Cybersecurity Center (CNC)Lo mgwamanda uzosebenza njengesizinda sokuxhumanisa ukuvikelwa kwamanethiwekhi kanye nezinhlelo zolwazi, ukuvumelanisa indlela yokunquma phakathi kweziphathimandla ezihlukene zokulawula (Ingaphakathi, Izokuvikela kanye Noguquko Lwedijithali), ukukhuthaza amaqembu okuphendula izigameko (ama-CSIRT) kanye nokwenza kube nombono ohlangene kakhudlwana we-ecosystem kazwelonke yokuphepha ku-inthanethi.

Phakathi nesigaba sokubonisana nomphakathi, Izinhlangano ezifana nenkundla ye-ISMS zenze iminikelo efaneleIziphakamiso zihlanganisa ukuqinisa indima yesikhulu sezokuvikela solwazi, ukuhlukanisa lesi sikhundla kuMthetho Wokuvikela Ezizimele, nokusungula izindlela zokuphendula ezithile lapho ibhizinisi elingahambisani nemithetho liwukuphatha komphakathi, lokho, ngokwemvelo yalo, elingakwazi ukujeziswa ngokwezimali. Phakathi kweziphakamiso kungenzeka kube nezixwayiso zomphakathi, ngokuhambisana nezinhlinzeko ze-LOPDGDD (Umthetho Wezinto Eziphilayo Wokuvikelwa Kwedatha Yomuntu Siqu kanye Nesiqiniseko Samalungelo Edijithali) mayelana nokuvikelwa kwedatha.

Imikhakha nezinhlobo zamabhizinisi athintwa i-NIS2

I-NIS2 ihlukanisa izinhlangano ngaphansi koMyalelo njenge izinhlangano ezibalulekile o izinhlangano ezibalulekileIzinga lisekelwe ikakhulukazi emkhakheni abasebenza kuwo kanye nosayizi wazo (izinkampani ezimaphakathi nezinkulu, ngaphandle kwalokho okusekelwe ekubalulekeni). Ngokuvamile kusebenza ezinkampanini zikahulumeni noma ezizimele ezenza imisebenzi yazo e-EU, okungenzeka ukuthi zifake izinhlangano ezincane lapho Amazwe Angamalungu ezikhomba njengezibalulekile noma ezibalulekile ngenxa yokuhambisana kwazo.

Imikhakha ebaluleke kakhulu ifakiwe ku Isijobelelo I ye-NIS2, kuyilapho eminye imikhakha ebalulekile ibalwe ku Isijobelelo IIE-Spain, ukwanda kwenani lemikhakha kuncane kakhulu kunakwamanye amazwe, ngoba ukuguqulwa kwe-NIS endala kwase kuhambisana noMthetho 8/2011 Wokuvikelwa Kwengqalasizinda Ebalulekile, ehlanganisa imikhakha ye-12. Noma kunjalo, i-NIS2 ihlanganisa izindawo ezintsha ezifana... izinsiza zeposi nezeposi, ukuphathwa kukadoti, noma izigaba ezahlukene zokukhiqiza, futhi aphule amanye, isibonelo, ukuhlukanisa phakathi kwamanzi okuphuza namanzi angcolile.

Phakathi kwemikhakha nezibonelo zamabhizinisi, avelela:

• AmandlaIzinkampani ezihlinzeka ngogesi, abaphathi benethiwekhi yezokuthutha nokusabalalisa, abakhiqizi, abaqhubi be-NEMO, abahlanganyeli bemakethe kagesi, abaqhubi bezindawo zokushaja; igesi, uwoyela kanye ne-hydrogen network opharetha kanye nabaphathi.
• Ukuthutha: izinkampani zezindiza, abaqhubi besikhumulo sezindiza, ukulawula ukuhamba kwezindiza, abaphathi bengqalasizinda kaloliwe, izinkampani zikaloliwe, izinhlangano zezokuthutha zasolwandle nasemifuleni, abaqhubi bamachweba, izinsizakalo zethrafikhi yemikhumbi, iziphathimandla zemigwaqo kanye nabaqhubi bezinhlelo zokuthutha ezihlakaniphile.
• Ingqalasizinda yamabhange kanye nezimakethe zezimali: izikhungo zezikweletu nabaphathi bezikhungo zokuhweba, izinkampani ezimaphakathi, ezinombono wokuthi i-DORA isebenza njengezinga elithile lomkhakha.
• Umkhakha wezokunakekelwa kwempilo: abahlinzeki bezempilo, amalabhorethri ayinkomba e-EU, izinhlangano ze-R&D zemithi, abakhiqizi bemikhiqizo yemithi eyisisekelo nekhethekile, nabakhiqizi bemishini yezokwelapha ebalulekile ezimeni eziphuthumayo zezempilo zomphakathi.
• Amanzi okuphuza namanzi angcolileAbahlinzeki nabasabalalisi bamanzi okuphuza, nezinkampani ezinomthwalo wemfanelo wokuqoqwa, ukulahlwa kanye nokwelashwa kwamanzi angcolile asemadolobheni, asekhaya noma ezimbonini.
• Ingqalasizinda yedijithaliAbahlinzeki bephoyinti lokushintshisana nge-inthanethi (IXP), amasevisi e-DNS, okubhaliswa kwesizinda esiphezulu, abahlinzeki besevisi yekhompuyutha yamafu, izikhungo zedatha, amanethiwekhi okulethwa kokuqukethwe (ama-CDN), abahlinzeki besevisi abathenjwayo, abahlinzeki benethiwekhi yomphakathi yezokuxhumana ngogesi, nezinsizakalo zokuxhumana ngogesi zomphakathi.
• Ukuphathwa kwesevisi ye-ICT yebhizinisi kuya kwebhizinisi: abahlinzeki besevisi abaphethwe nabahlinzeki besevisi yezokuphepha abaphethwe, abanomthelela oqondile kulo lonke uchungechunge lokuhlinzeka ngobuchwepheshe.
• Ukuphathwa komphakathi: amabhizinisi Okuphathwa Kwezwe Okujwayelekile futhi, kwezinye izimo, amabhizinisi esifunda nawendawo, lapho ukuphazamiseka kwamasevisi awo kungase kube nomthelela omkhulu emisebenzini yomphakathi noma yezomnotho ebalulekile.
• Izinsiza zeposi nezokuthumela izincwadi: abahlinzeki abenza ukuqoqa, ukuhlunga, ukuthutha kanye nokusabalalisa ukuthunyelwa kweposi.
• I-Gestión de residuos: izinkampani ezizinikele ekuqoqweni, ezokuthutha, ekubuyiseni nasekulahleni imfucuza, okuhlanganisa nezindawo zokulahla imfucumfucu.
• Amakhemikhali: izinkampani ezikhiqiza, ezikhiqiza futhi zisabalalisa izinto zamakhemikhali nezingxube, futhi zikhiqize ama-athikili kuzo.
• Ukukhiqizwa, ukucubungula kanye nokusatshalaliswa kokudla: izinkampani zokudla ezizinikele ekusabalaliseni ama-wholesale kanye nokukhiqizwa nokucubungula kwezimboni ezinkulu.
• Ukukhiqiza okuthuthukile: abakhiqizi bemikhiqizo yezempilo kanye nokuxilongwa kwe-in vitro, abakhiqizi bekhompuyutha, imikhiqizo kagesi kanye ne-optical, okokusebenza kukagesi, imishini nemishini, izimoto nezinye izinto zokuhamba.
• Umkhakha womkhathi: opharetha bengqalasizinda yasemhlabeni abasekela ukunikezwa kwamasevisi asemkhathini, ngaphandle kwalabo ubunikazi babo noma ukuphatha okuhambisana ne-EU noma izinkampani zangaphandle ngaphakathi kohlaka lohlelo lwayo lwasemkhathini.

Kuyo yonke le mikhakha, Amabhizinisi amakhulu ngokuvamile ahlukaniswa njengabalulekileAmabhizinisi anosayizi omaphakathi avame ukuba ngobalulekile, ngaphandle uma kucaciswe ngenye indlela. Amabhizinisi amancane nancanyana ngokuvamile awafakwa ngenxa yobukhulu bawo, kodwa angase afakwe uma ukugxeka kwawo kuqinisekisa lokho.

Ukubusa kanye nezibopho zokuphatha eziphezulu

Olunye lwezinguquko ezihlaba umxhwele kakhulu ku-NIS2 kanye nohlaka lokuqala lweSpanishi ukugcizelela ukulawulwa kokuphepha ku-inthanethi kanye nesibopho esiqondile sezigungu eziphetheI-athikili ye-14 yomthethosivivinywa osalungiswa ihlanganisa lo mbono: ukuphepha kwe-inthanethi kusuka ekubeni indaba nje yobuchwepheshe kuya ekubeni yinkinga yamasu esezingeni eliphezulu.

Abaphathi abakhulu kufanele vumela futhi yengamele ukuqaliswa kwezinyathelo zokulawula ubungozi be-cybersecurityukuqinisekisa ukuthi ahambisana nengqikithi yenhlangano kanye nezingozi ezihlonziwe. Ngaphezu kwalokho, ithola ukuthi izigungu ezilawulayo zizothwala isibopho esikhulu uma kwenzeka ukungalandelwa komthetho, okuxhumene nombuso wezonswinyo oqinisiwe.

Elinye iphuzu elibalulekile yi- ukuqeqeshwa okujwayelekile kwe-cybersecurity kwamalungu abaphathiUkunikeza akwanele: abaholi kufanele baqeqeshwe ukuze baqonde ubungozi, benze izinqumo ezinolwazi, futhi basekele ukusabalala kwesiko eliqinile lokuphepha kuyo yonke inhlangano. Ngokulandelayo, kuzodingeka ukuthi bakhuthaze izinhlelo ezijwayelekile zokuqeqesha bonke abanye abasebenzi.

I-Athikili 20 ye-NIS2 igcizelela lo mbono ngokudinga ngokucacile izigungu ezibusayo ukuthi zazi ngezibopho zazo, zigunyaze izinyathelo, ziqinisekise ukuqaliswa kwazo futhi zikwazi ukuphendula, ezimweni ezimbi kakhulu, ngisho nemiphumela yomuntu siqu (njengokuhlukaniswa okungenzeka kwemisebenzi ezimeni ezithile).

Kulomongo, ubudlelwano phakathi kwabaphathi kanye Nesikhulu Esiphezulu Sezokuphepha Kolwazi (CISO noma okulinganayo) Kuba bucayi: inkhulumomphendvulwano engashintshile, engaguquki esekelwe engcupheni yenhloso kanye nenqubo yokuthobela ilindelekile.

Izinyathelo zokulawula ubungozi ezidingwa yi-NIS2

Isigaba 15 sohlaka lwaseSpain sithi Izinyathelo zokulawula ubungozi be-Cybersecurity kumele zisekelwe kumazinga obuchwepheshe kazwelonke, aseYurophu, nawamazwe ngamazwe., ukuhlanganisa, okungenani, izimfuneko ezibekwe ku-Article 21 ye-NIS2 futhi zathuthukiswa ku-Implementing Regulation (EU) 2024/2690.

Phakathi kwe izinyathelo okumele izinhlaka ezibalulekile nezibalulekile zizisebenzise, avelela:

• Izinqubomgomo zokuphepha nokuhlaziya ubungozi wezinhlelo zolwazi, nokubuyekezwa ngezikhathi ezithile.
• Ukuphathwa kwesigameko, okuhlanganisa ukutholwa okucacile, ukusabela kanye nezinqubo zokuthola kabusha.
• Ukuqhubeka kwebhizinisi, izipele, ukutakula kwezinhlekelele, nokulawulwa kwezinhlekeleleukuqinisekisa ukuqina kokusebenza.
• Ukuphepha kwe-Supply chain kanye nobudlelwano nabahlinzeki kanye nabahlinzeki bezinsizakalo eziqondile, okubandakanya ukubeka izidingo zenkontileka kanye nokulawulwa kokugunyazwa nokucwaninga.
• ukuphathwa kobungozi ekutholeni, ekuthuthukisweni nasekulondolozeni amanethiwekhi nezinhlelo zolwazi, okuhlanganisa neziqephu nezibuyekezo.
• Izinqubomgomo zokuhlola ukusebenza kwezinyathelo zokuphepha ku-inthanethingokusebenzisa ukucwaninga, amamethrikhi, nokubuyekezwa ngezikhathi ezithile.
• Izindlela eziyisisekelo zokuhlanzeka ku-inthanethi nokuqeqeshwa yabasebenzi, eguqulelwe kumaphrofayili ahlukene.
• Izinqubomgomo ze-Cryptography nezokubethela ukuqinisekisa ukugcinwa kuyimfihlo kanye nobuqotho bolwazi.
• Ukuphepha KwabasebenziUkulawula ukufinyelela nezinqubomgomo zokuphathwa kwempahla.
• Ukufakazela ubuqiniso kwezinto eziningi noma okuqhubekayo, ukuvikelwa kokuxhumana ngezwi kanye nokuxhumana okuphuthumayo.

ESpain, eziningi zalezi zinyathelo bezivele zikhona. I-National Security Scheme (ENS)Lokhu kubaluleke kakhulu kubaphathi bakahulumeni kanye nabaphakeli babo. Eqinisweni, i-State Agency for Digital Administration kanye ne-National Cryptologic Centre yethule ku-EU ukuqondana okuqinile kwe-ENS ne-NIS2, igqamisa amandla ayo njengesilinganiso saseYurophu kanye negalelo layo ekuqiniseni i-ecosystem kazwelonke yedijithali.

Nokho, i-NIS2 Ikhuphula izinga lezinkampani eziningi, okuhlanganisa nama-SME athintwa usayizi noma ukugxeka.Ezinhlanganweni ezivuthiwe, eziningi zalezi zidingo zihambisana nezinqubo ezikhona; ezinkulungwaneni zezinkampani ezingenazo isiko lokuvikeleka ku-inthanethi, zimele ukweqa okukhulu ekuvuthweni, izinsiza, kanye nenhlangano yangaphakathi.

Isikhulu Esiphezulu Sezokuphepha Kolwazi (CISO) kanye nemisebenzi yabo

Isigaba 16 somthethosivivinywa osalungiswa sithi Zonke izinhlaka ezibalulekile nezibalulekile kufanele ziqoke isikhulu sezokuphepha kolwaziLesi sibalo, esiphefumulelwe isipiliyoni sangaphambilini saseSpain nge-NIS yasekuqaleni, siba isikhungo sezinzwa sokuxhumanisa yonke into ehlobene nokuvikelwa kwezinhlelo nedatha.

Phakathi kwemisebenzi yayo eyinhloko yizo:

• Chaza futhi usebenzise isu lenhlangano le-cybersecurity, ehambisana nezingozi, izibopho zebhizinisi nokulawula.
• Linganisa, nciphisa, futhi ubuyekeze ubungozi ngokuqhubekayo, ukugcina umbono wakamuva wokuchayeka kwebhizinisi.
• Phatha ubufakazi, izinqubomgomo, namarekhodi adingekayo ukuze ubonise ukuthobelana wezibopho ezivela ku-NIS2 kanye nemithetho kazwelonke.
• Thuthukisa isiko le-cybersecurity ngokubambisana nabaphathi abaphezulu, ukuqeqeshwa kanye nokuqwashisa bonke abasebenzi.
• Qinisekisa ukuthobela izibopho zokubika isigameko, ukuxhumanisa imibiko kuziphathimandla ezinekhono.

ISpain yayingelinye lamazwe okuqala kulo ukwethula ngokusobala indima ye-CISO ekuguqulweni kwe-NIS yangaphambili. Kodwa-ke, ulwazi lubonise ukuthi inani elibalulekile labaqhubi ababalulekile alikaze liqoke ngokusemthethweni le ndima futhi, noma kunjalo, alizange lijeziswe. I-NIS2, kuhlanganiswe nomthetho wesikhathi esizayo wase-Spain kanye nombuso wezinhlawulo eziqinile, ifuna ukulungisa lokhu kuxega futhi inikeze i-CISO isikhundla esiqine kakhulu nesibonwayo.

Ngibheke phambili, a ukwanda okukhulu kwamabhizinisi anesibophoKusukela cishe kuma-opharetha abalulekile amanje angama-400 kuye ebangeni elilinganiselwe phakathi kuka-5.000 no-50.000 wezinhlangano ezibalulekile nezibalulekile. Lokhu kuzosho isidingo esikhulu sochwepheshe bezokuphepha ku-inthanethi, kokubili ngaphakathi nangaphandle, ikakhulukazi kuma-SME angakaze abe nale ndima ngaphambilini.

Ukubikwa kwezigameko kanye nezibopho zokuphatha ubungozi

I-NIS2 Directive inikeza ukubaluleka okukhulu isaziso sangaphambi kwesikhathi sezehlakalo zokuphepha ezinomthelela omkhuluI-athikili 18 yomthetho osalungiswa wase-Spain ithuthukisa lesi sibopho, sihambisana nezikhathi nokuqukethwe okusungulwe yi-Directive.

Lapho ibhizinisi lihlupheka a isigameko esingadala ukuphazamiseka okukhulu ekuhlinzekweni kwezinsizakalo zayo noma umonakalo omkhulu kuyona noma kubantu besithathu, kufanele ihambisane nalolu hlelo lokubika olulandelayo:

• Isaziso sokuqala: kungakapheli amahora angama-24 ngemuva kokutholwa kwesigameko, kuhlinzeka ngolwazi oluyisisekelo olutholakalayo.
• Umbiko wesikhashana: ngaphakathi kwesilinganiso samahora angu-72 kusukela ekutholweni, ngokuhlolwa kokuqala komthelela nobukhulu.
• Umbiko wokugcina: phakathi nesikhathi esiphezulu senyanga eyodwa kusukela kusaziso sokuqala, okuhlanganisa nencazelo enemininingwane yesigameko, umthelela waso, ubukhali kanye nezinyathelo ezithathiwe.

Ngaphezu kwalokho, i-NIS2 kuqinisa ukuphathwa kobungozi kanye nokuxhumanaAkukhona nje ukubika ngezigameko ezenzekile, kodwa futhi mayelana ukwabelana ngolwazi olufanele mayelana nokuba sengozini okungase kube nomthelela wesistimu, kube lula ukuhlanganiswa kwezimpendulo emazingeni kazwelonke naseYurophu.

E-Spain, i-ecosystem yokuphendula incike kuyo ama-CSIRT amathathu amakhuluI-CCN-CERT (yokuphatha umphakathi, izinkampani zamasu, nezinhlelo ezihlukanisiwe), i-INCIBE-CERT (imboni ezimele nezakhamuzi), kanye ne-MCCE (umkhakha wezokuvikela) zonke ziyingxenye yale nethiwekhi. Ngaphezu kwalokho, kunenethiwekhi ye-csirt.es, ehlanganisa inqwaba yamaqembu akhethekile futhi ixhuma namanethiwekhi omhlaba afana ne-FIRST, kanye ne-National SOC Network.

Amabhizinisi abalulekile futhi abalulekile kufanele bika izehlakalo zakho kuma-CSIRT afanelekile, ngokuhambisana nemithethonqubo yomkhakha kanye nemihlahlandlela ye-National Cybersecurity Centre yesikhathi esizayo, ezosebenza njengengxenye yokuxhumanisa nokuxhumana ne-ENISA kanye namanye Amazwe Angamalungu.

Umbuso weSanctions kanye nengcindezi yaseYurophu

I-NIS2 Directive isungula a umbuso wezinhlawulo ezinzima kakhulu kunalowo we-NIS yangaphambiliEmabhizinisini abalulekile, ukwephulwa komthetho okungathi sína kakhulu kungaholela ekuhlawulisweni okungafika ku-10 million euros noma u-2% wenzuzo yomhlaba wonke yeqembu, kuyilapho ezinkampanini ezibalulekile izinhlawulo zingafinyelela kuma-euro ayizigidi ezingu-7 noma u-1,4% wenzuzo yomhlaba wonke.

Khona manje, Akukho unswinyo olususelwe ku-NIS2 oselubonwe e-SpainLokhu kungenxa yokuthi umthetho wokuguqula izinto awukasebenzi futhi igunya lokuqondisa alikaqokwa ngokusemthethweni. Kwamanye Amazwe Angamalungu, ukuguqulwa kusanda kwenzeka, ngakho-ke kusesekuseni kakhulu ukubona isenzo sokuphoqelela esisabalele.

Noma kunjalo, ochwepheshe bayavuma ukuthi, lapho amazwe afana neFrance noma iJalimane eqala ukusebenzisa unswinyoISpain ayinakukwazi ukusala ngemuva uma ifuna ukugcina ukuvumelana nokwethembeka ezingeni laseYurophu. Ingcindezi yeKhomishana, ngezinqubo zokwephulwa kwemithetho kanye nemibono ecatshangelwayo, ihloselwe ukufeza lokhu.

Ngaphezu kwenani lemali lezinhlawulo, i-NIS2 yethula okokuqala ngqa ngale ndlela ecacile isibopho sabaphathi abakhulu sokuvikeleka kwe-inthanethiUkunqanyulwa phakathi kwabaphathi ne-CISO akuseyona inketho: isigungu esilawulayo kufanele sibandakanyeke, saziswe, futhi senze izinqumo ezifanele.

Inselelo enkulu, ngokusho kongoti abafana nabase-ISMS Forum, ilele inethiwekhi yama-SME okuthi, ngaphandle kokwazi ngokugcwele, izoboshwa yi-NIS2Abaningi abanazo izinsiza ezanele zokuvikeleka ku-inthanethi, izinqubo, noma isiko, futhi "bazophushwa" ngokomthetho kanye nezimfuno zamakhasimende abo amakhulu ochungechungeni lokunikezela, okuzodingeka afune iziqinisekiso zenkontileka ukuze athobele uMyalelo.

Ukusekela imizamo, izifundo kanye nendima ye-ENS

Ngokuhambisana nenqubekelaphambili yomthetho, I-Spain iphromotha izinhlelo zobuchwepheshe nolwazi ukusiza ukujwayela kwendwangu yebhizinisi ku-NIS2. Iforamu ye-ISMS, ngokwesibonelo, isebenza ocwaningweni Lomthelela we-NIS2 Ezinkampanini ZaseSpain, ngaphansi kukaSihlalo Ongavamile We-Cybersecurity kanye Nokuvikelwa Kwedatha we-UCM.

Le phrojekthi iphishekela izinhloso ezimbili: ukwakha ukubalwa kwabantu okungagunyaziwe kwezinkampani ezithintwe yi-NIS2 futhi ulinganise izinga labo lokuvuthwa ku-cybersecurity. Esigabeni sokuqala, ukubalwa kwabantu kuzohlanganiswa kusetshenziswa imininingwane yolwazi ebanzi (irejista yezentengiselwano, i-DIRCE/INE, isizindalwazi semikhakha, njll.), nedethi elinganiselwe yemiphumela cishe ngoNovemba 2025. Esigabeni sesibili, uhlu lwemibuzo olufushane luzothunyelwa kusampula emele izinkampani (okuhlosiwe kwezimpendulo ze-1.000) ukuze kuhlolwe izinga labo le-202 ngoMeyi 26 okulindeleke.

Ukuhlaziywa kuzobandakanya Izigaba ngomkhakha, usayizi, ukusatshalaliswa kwendawo kanye nohlobo lwebhizinisi (kubalulekile noma okubalulekile)Ukwethula iziphetho embikweni wesigungu esiphezulu, ngaphandle kwedatha yomuntu ngamunye, osebenzela kokubili izinkampani neziphathimandla.

Ngaso leso sikhathi, izinhlangano ezifana neForamu ye-ISMS kanye nezinhlaka ezahlukene zomphakathi ukuhambisa izinsuku zokufinyelela kuyo yonke indawo kazwelonkengokunaka okukhethekile kuma-SME. Umgomo "ukushumayela ivangeli," ukuchaza ngokucacile ukuthi i-NIS2 ihlanganisani, kungani kubalulekile ukuba ne-CISO (yangaphakathi noma yangaphandle), indlela yokuchaza izinqubomgomo eziyisisekelo zokuphepha ku-inthanethi, nokuthi ungawulungiselela kanjani umthetho wesikhathi esizayo kanye nemithetho ehambisana nawo.

Ngokwemibandela yokulawula ngokuqinile, i I-National Security Scheme yethulwe eYurophu njengomunye wamandla amakhulu eSpain.I-State Agency for Digital Administration kanye ne-National Cryptologic Center (CCN) babelane ne-NIS2 Cooperation Group ngolwazi oluqoqiwe lwe-National Security Framework (ENS), amaphrofayli ayo okuhambisana nawo, kanye nokuhlanganiswa kwayo nezikimu zesitifiketi sase-Europe Somthetho (EU) 2019/881 (Cybersecurity Act). Ukwamukela okuhle kwale phrezentheshini kuqinisa isithombe sase-Spain njengomdlali okhuthele ozibophezele ekuqiniseni ukuphepha kwe-inthanethi okuqinile, okuhambisanayo, nokuvumelanayo.

Kulomongo, Ukuzijwayeza kweSpain ku-NIS2 kubambeke phakathi kwengcindezi yezinsuku eziwumnqamulajuqu, umsindo wobuchwepheshe wamathuluzi afana ne-ENS, kanye nenselele enkulu yokuhlanganisa izinkulungwane zamabhizinisi amasha. kusiko elithuthukisiwe lokuphepha ku-inthanethi. Izinhlangano eziya phambili, ezihlaziya isimo, futhi ziqale ukuqondanisa imikhuba yazo neSiqondiso manje zizoba sesimweni esingcono sokunciphisa ubungozi, zigweme izinhlawulo zesikhathi esizayo, futhi zibonise ukuma okuqinile nokuvuthiwe mayelana nezinsongo ze-inthanethi.