Implementing the NIS Directive, Driving Cybersecurity Improvements for Essential Services

Wallis, T. and Johnson, C. (2020) Implementing the NIS Directive, Driving Cybersecurity Improvements for Essential Services. In: 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA), 15-19 June 2020, ISBN 9781728166919 (doi: 10.1109/CyberSA49311.2020.9139641)

Abstract

A review by the National Audit Office of the National Cyber Security Programme recommended a more robust performance framework, to understand the impact of the Programme and to focus activities going forward. The Directive on security of network and information systems (the NIS Directive) has placed responsibility for essential aspects of supply chains on Operators of Essential Services (OES). Our dependence on international supply chains also requires a performance framework to assist cybersecurity improvements in this area. The following sections describe work to investigate the implementation of the NIS Directive by Competent Authorities (CA) and OES and proposes a framework to monitor performance across interdependencies. This is to enable development of a more effective set of performance metrics to guide interventions and improvements in cybersecurity for critical infrastructure.

• Item Type: Conference Proceedings
• Additional Information: This project is overseen by RITICS, funded by NCSC and EPSRC.
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Johnson, Professor Chris and Wallis, Dr Tania
• Authors: Wallis, T., and Johnson, C.
• College/School: College of Science and Engineering > School of Computing Science
• ISBN: 9781728166919
• Copyright Holders: Copyright © 2020 IEEE
• First Published: First published in Proceedings of the 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA)
• Publisher Policy: Reproduced in accordance with the copyright policy of the publisher

Related URLs

• Organisation