DIGITAL LIFE

Around 12% of organizations are unaware of cybersecurity directives

These are some of the conclusions of the report by the European Union Agency for Cybersecurity (ENISA) on investments in network and information system security NIS ['Network and Information Security', in English] in 2024, where it is an assessment of the cybersecurity policy has been carried out.

In the European Union (EU) 28, awareness of the directive is widespread, with 92% of respondents suggesting they are aware of the broad outlines of NIS2.

However, the level of knowledge varies "significantly" between Member States and sectors. For example, France and Finland have 100% of entities surveyed claiming to be aware of the directive, while Malta records 80% and Bulgaria 82%.

In Portugal, 88% of entities are aware of the cybersecurity directive - whose transposition is under public consultation -, at the same level as Romania and below Spain and Poland (94%), Slovenia, Slovakia and Hungary (92%), for example.

Conversely, 12% of Portuguese entities still do not have knowledge, as well as in Estonia and Romania, while in Malta there are 20%, followed by Bulgaria (18%), with Croatia (16%) and Lithuania (14%). All other countries record a percentage below 12%.

Regarding leadership involvement in dedicated cybersecurity training by Member State, the ENISA report says that in Portugal 40% of the entities involved in the study said that their leaders did not receive training in this matter, above Germany (32%), Spain and France (34%) or Italy (30%).

However, in this parameter, Portugal performs better than Greece (54%), Gunfria (65%) or Sweden (44%).

With regard to leadership involvement in approving cybersecurity risk management measures, in Portugal 86% of entities say they are responsible for taking measures. In Germany it is 98%, in Spain, France and Italy 94%, while in Sweden it is 82%.

In terms of perceived maturity of cybersecurity risk management, Portugal has a score of 6.8, below Spain (7.8), France (7.9), Italy (7.8) and Germany (7.6). ), between others.

Below this score is Cyprus (5.2), Malta (5.4) or Lithuania and Estonia (5.6).

In terms of ability to detect and respond to sophisticated cyberattacks, Portugal has a score of 7.1, above Cyprus (5.5), Malta (5.8), Luxembourg (6.8) or Greece (7), among others. .

Spain leads (score 8), followed by France (7.9) and Germany and Finland (7.6).

mundophone