auditcarriere.nl

How companies can deal with the increase of EU Tech regulations

Nieuws
24-09-2024
Yuri Bobbert
Stijgende regelgeving zoals GDPR, NIS en DORA belast bedrijven steeds sterker. Cyberrisico's en de regelgeving daarom heen versterken dit. Zogenaamde in-controlverklaringen kunnen de druk op zowel bedrijven als toezichthouders verlichten.

By Yuri Bobbert

The number of enterprises subject to regulatory requirements has increased significantly under existing and new legislation such as the EU General Data Protection Regulation (GDPR), the Security of Network and Information Systems (NIS) regulations NIS1 and NIS2,[1] and the EU Digital Operational Resilience Act (DORA).[2] Last week Mario Draghi warned these EU legislations are “killing our companies”.[3] Likewise, cyberrisks adds complexity for business owners, investors, financiers, necessitating more thorough due diligence regarding an enterprise’s technology stack. Supervisory bodies will face significant challenges due to talent- and knowledge scarcity and an old-fashioned way of working. Proactive in-control statements put the burden of digital-assurance proof on the company rather than the supervising bodies. I expect this will significantly relieve both entrepreneurs and supervisory bodies.

What Is the Problem, and Who Is Affected?

Regulatory and industry requirements related to cybersecurity are skyrocketing. They include standards imposed by De Nederlandsche Bank (DNB), DORA, the European Union (EU) Cyber Resilience Act,[4] NIS2[5], the SWIFT Customer Security Programme (CSP),[6] US Federal Risk and Authorization Management Program (FedRAMP)[7], International Organization for Standardization (ISO) standard ISO 27001, the Center for Internet Security (CIS) Critical Security Controls[8], the US Federal Information Security Management Act (FISMA),[9] the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53[10], Cloud Security Alliance Capability Assessment Model (CSA CMM)[11], American Institute of Certified Public Accountants (AICPA) Trust Service Criteria (TSC)[12] and the Payment Card Industry Data Security Standards (PCI DSS)[13] etcetera. Managing all these regulations is a complex process for enterprises and regulators who need to supervise their correct implementation. The number of enterprises affected in the European Union alone runs into the millions (Figure 1).[14]

[....]

Lees verder op: isaca.nl

Gerelateerde vacatures

Geïnteresseerd in een carrière bij organisaties in ditzelfde vakgebied? Bekijk hieronder de gerelateerde vacatures en vind de perfecte match voor jou!
OnLogic
7.000 - 8.000
Medior, Senior
Oosterhout
As Director of Finance at OnLogic, you'll lead global finance efforts, enhance accounting processes, ensure compliance, and support strategic initiatives. You'll drive efficiency, provide financial insights, and collaborate across departments...
Renewi
Max. 130.000
Senior
Eindhoven, Amersfoort
As Head of Finance – Inbound Sales & Marketing at Renewi, you'll provide financial leadership for commercial strategies, collaborating with sales and marketing teams to drive sustainable growth. Lead a...
Top vacature
Klaverblad
Marktconform
Senior
Zoetermeer
Als Risicomanager bij Klaverblad speel je een centrale rol in het ontwikkelen en onderhouden van niet-financieel risicomanagement. Je monitort risico's, adviseert over beheersmaatregelen, en werkt aan risicobewustzijn binnen de organisatie....
Interprovinciaal Overleg
Max. 5
Medior
Den Haag
Als Adviseur Planning & Control bij de Vereniging IPO speel je een cruciale rol in het versterken van financiële processen. Je adviseert over financiële kaders, signaleert risico's en ontwikkelt kostprijsmodellen....