{"id":18078,"date":"2025-06-26T17:43:15","date_gmt":"2025-06-26T15:43:15","guid":{"rendered":"https:\/\/www.thegreenbow.com\/?post_type=resource&p=18078"},"modified":"2025-07-01T18:05:31","modified_gmt":"2025-07-01T16:05:31","slug":"three-good-reasons-to-use-a-vpn-to-achieve-nis2-compliance","status":"publish","type":"resource","link":"https:\/\/www.thegreenbow.com\/en\/ressource\/blog-en\/three-good-reasons-to-use-a-vpn-to-achieve-nis2-compliance\/","title":{"rendered":"Three good reasons to use a VPN to achieve NIS2 compliance"},"content":{"rendered":"\n
\n

Auteur : Arnaud DUFOURNET<\/strong>, Marketing & Customer Experience Director<\/p>\n\n\n\n

The annual activity reports published by the French National Cybersecurity Agency ANSSI<\/a>, and the French government\u2019s cyberattack assistance service Cybermalveillance<\/a> [report in French only], both show a worrying rise in cyberattacks in 2024 (49.9% more requests for assistance logged by Cybermalveillance, and 15% more security events recorded by ANSSI). It is vital that European companies strengthen their resilience in response to the growing danger posed by these threats. This is, of course, the entire point of the NIS2 directive<\/a> currently being transposed into national laws by the EU member states. In France, the bill on \u201ccritical infrastructure resilience and strengthening cybersecurity\u201d presented to the Council of Ministers on October 15, 2024 and adopted by the Senate (upper house) on March 12, 2025 is not expected to go before the National Assembly before September. This bill, as readers might recall, transposes three European Union directives (REC, NIS2, and DORA) to harmonize and simplify the compliance of those entities affected by them.<\/p>\n\n\n\n

A new set of technical and organizational requirements<\/strong><\/h2>\n\n\n\n

One of the major challenges in implementing this legislation is the extension to the scope of those organizations needing to deal with cyber resilience. Some 15,000 organizations in France will have to comply with the provisions, and the vast majority of them will be discovering previously unknown levels of cybersecurity requirements.<\/p>\n\n\n\n

\n

To guide them, ANSSI has been working since late 2023 on a reference framework based on 20 security objectives through which NIS2 compliance can be achieved. These objectives cover four key issues, namely Protection<\/strong>, Defense<\/strong>, Governance<\/strong>, and Resilience<\/strong>.<\/p>\n<\/div>

\"\"<\/figure><\/div>\n\n\n\n

Following consultation with federations, industry bodies, associations of elected representatives, and local authority representatives, a second version, still containing 20 objectives, is currently being finalized. These objectives are accompanied by tangible measures to be put in place, plus acceptable means of compliance for NIS2 \u201cessential entities\u201d and \u201cimportant entities\u201d. Of these measures, the use of VPNs is emerging as a must-have in terms of meeting three of the objectives set by ANSSI.<\/p>\n\n\n\n

Keeping remote access secure<\/strong><\/h2>\n\n\n\n

Whether they are categorized as important or essential, organizations subject to NIS2 must without fail control access to their information systems. The major new aspect to this European directive is that this control concerns remote access granted both to off-site employees such as those working from home, and to IT service providers and suppliers who also have such access.<\/p>\n\n\n\n

Using a VPN meets the objective of keeping remote access secure in two respects:<\/p>\n\n\n\n