The imminent transposition in España of the European directive NIS2 This will represent a paradigm shift for the food industry, which will now be considered 'critical sector'This new regulation will require companies in the sector with more than 50 employees or a turnover exceeding €10 million to implement and demonstrate a robust level of cybersecurity. To analyze the implications of this regulation, the certification body ACERTA and the consultant Cross Mind They are organizing a webinar on May 19th.
This new common legal framework seeks to strengthen the resilience of critical infrastructures Unión Europea in the face of growing digital threats. In an environment where the industrial production and packaging processes As businesses increasingly rely on interconnected technology, cybersecurity has become a fundamental pillar to ensure business continuity and supply chain security.
A common framework for a strategic sector
Directive NIS2 It establishes a clear threshold for determining which companies in the agri-food industry will be subject to these new obligations. The inclusion of the food sector as "critical" reflects its strategic importance and the need to protect it against incidents that could have a significant impact on the economy and society.
With the aim of preparing the business sector, ACERTA, in collaboration with the specialized consulting firm Cross Mind, has organized the free webinar “Impact of the NIS2 directive on the food industry”The event, which will be held online next Tuesday 19 May at 13: 00 hoursIt will address the responsibilities that will fall on the senior management of the affected companies and the keys to proper cybersecurity management under the new regulation.
Criteria for the Impact of the NIS2 Directive on the Food Sector
| Criterion | Condition for being considered an obligated entity |
|---|---|
| Size of the company | More than 50 workers |
| Annual Billing | Over 10 million euros |
| Sector Classification | Food (considered a 'critical sector') |
Risks and responsibilities for management
One of the most relevant new features of the directive NIS2 It places the ultimate responsibility for cybersecurity management on the governing bodies of the companies. This implies that managers will have to supervise, approve and implement risk management measures, as well as be accountable for any security breaches that may occur due to poor management.
According to reports from ACERTA y Cross MindFailure to comply with regulations will not only expose companies to financial penalties, but also to severe operational risks, such as production stoppages, loss of sensitive data, or reputational damage—critical factors for any company with an international focus.
Key points and frequently asked questions about the NIS2 Directive and the food industry
My food company has a turnover of 12 million euros and 60 employees. How does the NIS2 directive directly affect me?
Yes, your company would be directly affected by exceeding both thresholds (more than 50 employees and more than €10 million in revenue). You will need to implement a cybersecurity risk management system, report significant incidents to the relevant authorities, and be able to demonstrate regulatory compliance. Responsibility will fall directly on the management team.
What types of cyberattacks are most common in the food industry, and what does NIS2 seek to protect against?
The most common attacks include the ransomwarewhich can paralyze production and packaging lines; industrial espionage to steal formulas or processes; and attacks on industrial control systems (OT/SCADA). NIS2 It seeks to protect the continuity of production, the integrity of the supply chain and the safety of products that reach the end consumer, ensuring the resilience of the sector at the European level.
What first steps should an export manager take to align their company with NIS2?
The first step is to make a cybersecurity risk assessment specific to the company's production and logistics processes. Subsequently, it is essential to review and update existing security policies, train key personnel, and consider seeking advice from external experts to design a plan to adapt to the new directive. Attendance at informational events such as the one organized by ACERTA y Cross Mind It is a strategic starting point.
Any questions about this news?
Talk to Coexia, the AI of the foreign trade
