The EU’s new Network and Information Security 2 Directive sets out new security requirements for manufacturing companies and includes penalties of up to ten million euros or two percent of global turnover. This is the first time that new cybersecurity regulations have focused on the industry as a whole as well as critical infrastructure. Sectors like chemicals, food, and general industrial activity—including mechanical engineering, transport, automotives, and electricals—are directly impacted by the Directive.
It goes further than previous legislation—meaning its predecessor NIS and the KRITIS Directive— by setting out more specific regulations and higher fines that affect not only critical infrastructures.