Webinar: Beyond ISO 27001 - DORA and NIS 2

In this webinar, join experts from DNV and URM Consulting Services as they explore two pivotal EU cybersecurity initiatives: the Digital Operational Resilience Act (DORA) and the Network and Information Systems Directive 2 (NIS 2), outlining what ISO 27001-certified organisations need to consider to ensure compliance.

The Digital Operational Resilience Act (DORA) and the Network and Information Systems Directive 2 (NIS 2) are two key components of the European Union's strategy to enhance cybersecurity and operational resilience across various sectors.

In this webinar, our experts will cover what organisations that are already certified to ISO 27001 would typically need to do in order to comply with each of them.  It will provide a high-level overview of the DORA Regulation and NIS 2 Directive which will include:

  • The purpose of each, including key differences and similarities
  • What types of organisation need to comply with each
  • The structure of each
  • How each will be enforced

We will explore how an ISO 27001-conformant Information Security Management System (ISMS) and its control framework align with the requirements of DORA and NIS 2. The session will highlight where these regulations demand more stringent controls and more comprehensive evidence than ISO 27001 typically requires. We’ll also identify control areas that may be entirely new or significantly different for ISO 27001-certified organisations. Finally, we’ll examine the relevance of DORA and NIS 2 to UK-based organisations and outline the UK Government’s plans to introduce comparable regulatory measures.

Register now to secure your spot - register even if you are unable to attend the live event, as an on demand recording of the live event will be made available to all registrants following the live webinar.

About the URM:

URM Consulting Services (URM) is dedicated to providing high quality, cost-effective and tailored consultancy and training in the areas of information and cyber security, data protection, business continuity and risk management. Specific areas of expertise include PCI DSS, GDPR, SOC 2, supporting organisations in achieving ISO 27001 certification, and Cyber Essentials certification.

With a 20-year proven track record, and are renowed for quality, responsiveness, and trustiworthiness. Their dedicated, experienceed GRC and cyber testing teams offer a balanced and pragmatic approach when it comes to delivering tailored and sustainable solutions:

Find out more here