Sectors
Sectors
The obligation differs by sector. The underlying work of understanding, owning and reporting risk does not.
FINMA 2023/1 and DORA
Financial services
What is critical, what tolerance applies to disrupting it, and whether recovery inside that tolerance can be demonstrated.
FINMA 2023/1 and DORA: what each requiresNIS2 and the CER Directive
Energy and utilities
Cyber and physical resilience of essential services, with reporting timelines and accountability attached to management.
A regime we advise to; see selected engagements for delivered sectors.
What do NIS2 and the EU CER Directive mean in practice?Multi-site continuity
Manufacturing
Set by customer contracts and insurance more often than by a single regulation, and by one site being able to halt another.
At what level should a multi-site organisation write its continuity plans?Supply chain and third-party risk
Consumer goods
The same continuity and third-party questions, across more jurisdictions and more tiers of supplier.
How do you build one control library that answers several regulations at once?