{"id":118368,"date":"2024-10-09T04:59:34","date_gmt":"2024-10-09T02:59:34","guid":{"rendered":"https:\/\/ceadigilaw.org\/paralelismo-y-complementariedad-entre-nis2-iso-iec-27001-y-nist-csf-2-0\/"},"modified":"2026-07-17T21:34:23","modified_gmt":"2026-07-17T19:34:23","slug":"paralelismo-y-complementariedad-entre-nis2-iso-iec-27001-y-nist-csf-2-0","status":"publish","type":"post","link":"https:\/\/ceadigilaw.org\/en\/blog\/paralelismo-y-complementariedad-entre-nis2-iso-iec-27001-y-nist-csf-2-0\/","title":{"rendered":"Parallels and complementarity between NIS2, ISO\/IEC 27001 and NIST CSF 2.0"},"content":{"rendered":"

Antonio Tejeda Encinas<\/a><\/strong>. CEO, Meta Channel Corp. President of the Euro-American Committee of Digital Law - CEA Digital Law \u2013 CEA Digital Law<\/a><\/strong>.<\/span><\/p>\n

Let\u2019s not mix them up!<\/span><\/p>\n

Parallels and complementarity between NIS2, ISO\/IEC 27001 and NIST CSF 2.0: a comprehensive framework for cybersecurity in Europe\u00a0<\/span><\/p>\n

With cybersecurity becoming ever more important in Europe, it is essential to understand how these three frameworks differ and how they complement one another:<\/span><\/p>\n

\u00a0
\nNIS2 (EU Directive on the Security of Network and Information Systems)<\/strong><\/span><\/p>\n

\u2013\u00a0Nature:<\/strong>\u00a0A legal and regulatory directive of the European Union.<\/span><\/p>\n

\u00a0\u2013\u00a0Objective:<\/strong>\u00a0To ensure a minimum level of cybersecurity in critical infrastructure and essential sectors (energy, health, transport, etc.).<\/span><\/p>\n

\u00a0<\/span>
\n\u2013\u00a0Compliance:<\/strong>\u00a0Mandatory for all Member States and for companies in critical sectors.<\/span><\/p>\n

\u2013\u00a0Scope:<\/strong>\u00a0Protecting the security of essential infrastructure and digital services.<\/span><\/p>\n

\u2013\u00a0Applicable:<\/strong>\u00a0From October 2024.<\/span><\/p>\n


\nISO\/IEC 27001 (Information Security Management System)<\/strong><\/span><\/p>\n

\u00a0<\/span>
\n\u2013\u00a0Nature:<\/strong>\u00a0A voluntary international standard.<\/span><\/p>\n

\u2013\u00a0Objective:<\/strong>\u00a0To create a security management system that guarantees the confidentiality, integrity and availability of information.<\/span><\/p>\n

\u2013\u00a0\u00a0Compliance:<\/strong>\u00a0Voluntary, based on certification.<\/span><\/p>\n

\u2013\u00a0Scope:<\/strong>\u00a0Applicable to any type of organisation that wishes to structure its security around its specific risks.<\/span><\/p>\n

\u2013\u00a0Applicable<\/strong>: Last updated in October 2022.<\/span><\/p>\n


\nNIST CSF 2.0 (National Institute of Standards and Technology Cybersecurity Framework)<\/strong><\/span><\/p>\n

\u2013\u00a0Nature:<\/strong>\u00a0A cybersecurity management framework developed in the US.<\/span><\/p>\n

\u2013\u00a0Objective:<\/strong>\u00a0To provide good practice for managing risk and improving organisations\u2019 security posture.<\/span><\/p>\n

\u2013\u00a0Compliance:<\/strong>\u00a0Voluntary; adopted by many companies as a reference standard.<\/span><\/p>\n


\n\u2013 Scope:<\/strong>\u00a0An adaptable approach for all types of organisation, from small businesses to large corporations.<\/span><\/p>\n

\u2013\u00a0Applicable<\/strong>: Draft of version 2.0 presented in October 2024.<\/span><\/p>\n


\nWhy does it matter?<\/strong>\u00a0\ud83d\udd0d\ud83d\udc47<\/span><\/p>\n

Although all three deal with cybersecurity, NIS2 establishes a mandatory legal framework to protect critical infrastructure in Europe, whereas ISO 27001 and NIST CSF 2.0 are voluntary guides that allow companies to structure their security according to their own risks and objectives.<\/span><\/p>\n

\ud83d\udca1\u00a0Taken together, these frameworks do not replace one another: they complement each other to build comprehensive cybersecurity across the region.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Antonio Tejeda Encinas. CEO, Meta Channel Corp. President of the Euro-American Committee of Digital Law - CEA Digital Law \u2013 CEA Digital Law. Let\u2019s not mix them up! Parallels and complementarity between NIS2, ISO\/IEC 27001 and NIST CSF 2.0: a comprehensive framework for cybersecurity in Europe\u00a0 With cybersecurity becoming ever more important in Europe, it […]<\/p>\n","protected":false},"author":2,"featured_media":112331,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wds_primary_category":0,"wds_primary_cea_women":0,"footnotes":""},"categories":[1118],"tags":[],"cea_women":[],"class_list":["post-118368","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ciberseguridad-pt"],"acf":[],"_links":{"self":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/comments?post=118368"}],"version-history":[{"count":1,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118368\/revisions"}],"predecessor-version":[{"id":119450,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118368\/revisions\/119450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media\/112331"}],"wp:attachment":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media?parent=118368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/categories?post=118368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/tags?post=118368"},{"taxonomy":"cea_women","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/cea_women?post=118368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}