Emerging threats
Understanding the NIS Directive (NISD) and how to be compliant [Video]
In this video, PGI’s CEO, Brian Lord discusses the basics of the NIS Directive (NISD), the concerns and risks, and how to begin the process of becoming compliant without reinventing the wheel or implementing an unnecessary or expensive framework.
NISD—which came into force in May 2018—concerns operational resilience in the face of technological disruption.
It is a baseline level cyber security requirement for Operators of Essential Services that are reliant on technology for delivery. The sectors within the scope of the Directive include, water distribution, transport, energy, health, and digital infrastructure/services.
Organisations that meet the thresholds of the framework will need to adhere to the controls put in place by their sector-specific competent authority (read our NISD 101 here). Those that fall below should also be aware as the thresholds will be reviewed on a regular basis.
If you’re part of an organisation struggling with NISD implementation, talk to us about how we can help.
Related Insights
Why retail businesses are prone to an increasing PCI scope - and what you can do about it
Retail businesses are good at implementing things like new technology and payment channels. What often goes unnoticed is the compliance and operational overhead that accumulates around them, building quietly in the background, year after year, and lingering long after the technology itself has been replaced.
DCC Applicant Guidance May 2026 update: Here’s what you need to know
The Ministry of Defence (MoD) recently requested that all industry partners must achieve at least DCC Level 0 by the end of 2026.
What’s the difference between DCC Level 0 and 1?
The Defence Cyber Certification (DCC) scheme runs from Level 0 up to Level 3, but the most significant step is the one between 0 and 1.