Dyrektywa NIS2 jako wytyczna do wdrożenia systemu zarządzania bezpieczeństwem informacji w organizacji

In the face of a significant increase in incidents related to cybersecurity in its broadest sense, the NIS2 Directive introduces uniform rules for protecting information and communication systems across the European Union, imposing new obligations on companies and institutions from critical and important sectors. This article examines the extent to which the NIS2 Directive, along with its national implementing act, can become not only a challenge but also a practical guide for many organizations to implement or modernize their existing Information Security Management System (ISMS). Key provisions of NIS2 and their potential impact on enhancing security levels and risk management are discussed, as well as the challenges associated with its implementation. The article also addresses issues related to the adoption of amendments to the Polish Act on the National Cybersecurity System.