[NIS 2 Directive] Cybersecurity: From Recommended to Mandatory

NIS 2 changes the role of cybersecurity in all businesses

Our mission is to equip IT professionals with the  skills needed to tackle modern threats to cybersecurity.

A new EU directive is taking effect in 2025. It defines industries that are more exposed to cyber attacks and must therefore take the necessary steps to ensure compliance with these higher security standards.

Housing.si is one of the few companies in Slovenia offering comprehensive cybersecurity education. Our mission is to equip IT professionals with the knowledge and skills needed to tackle modern digital challenges, ensuring they stay ahead of cyber threats.

Key Requirements of the NIS 2 Directive

Regular Training and Education

Organizations must ensure their employees receive regular cybersecurity training, covering both basic and advanced topics to help IT professionals recognize and manage cyber threats. Housing.si offers a variety of courses to meet these needs.

Certifications and Qualifications

IT professionals must obtain relevant certifications such as CISSP, CISM, and CEH to demonstrate their expertise in cybersecurity. Housing.si provides courses to help prepare for these certifications.

Continuous Improvement

Given the rapidly evolving field of cybersecurity, IT professionals must continuously update their knowledge and skills. Organizations should provide access to the latest information and technologies and encourage participation in conferences, workshops, and other educational events. Housing.si offers the latest courses and workshops.

Reporting and Documentation

Organizations must maintain accurate records of all training and certifications. This documentation is crucial for demonstrating compliance with the NIS 2 Directive during inspections.

Categories of Entities under the NIS 2 Directive

Essential Entities

These include critical infrastructure and societal sectors such as:

  • Energy: Electrical grids, oil and gas industry.
  • Transport: Aviation, railways, maritime and road transport.
  • Financial Institutions: Banks, financial infrastructures, payment service providers.
  • Healthcare: Hospitals, healthcare providers.
  • Water Supply: Water supply and distribution.
  • Digital Infrastructure: Internet providers, network service providers.

Important Entities

These include sectors that are also important for the functioning of the economy:

  • Postal and Courier Services: Mail and package distribution.
  • Information Technology (IT): Providers of online services and data processing.
  • Water Management: Wastewater management.
  • Electronic Equipment Manufacturing: IT and other critical equipment.
  • Food Production: Production, processing, and distribution of key food items.
  • Private Security Providers: Data and premises security.
  • Public Administration: Key state and regional authorities.

Key Deadlines in 2025 for Training

Implementation Start

Organizations must begin implementing the NIS 2 Directive requirements at the start of 2025, including establishing appropriate training programs for IT professionals. Housing.si recommends enrolling in our courses in Q1 2025 to ensure compliance.

Regular Training

Throughout 2025, organizations must provide regular cybersecurity training for their employees, covering both basic and advanced topics. Check our 2025 course schedule.

Certifications and Qualifications

IT professionals must obtain the necessary certifications and qualifications by the end of 2025. Organizations must ensure their employees acquire the skills needed to effectively manage cyber threats. Our courses can help with obtaining these certifications.

Stay ahead of the inevitable rush caused by this directive. Enroll in one of our courses today. Together, we will ensure a secure future in the Slovenian IT sphere.