Eureka! Institutional Repository

In the light of a high level of cyber security and a holistic strategic approach, EU in 2016 issued the NIS directive which was the first organized European effort to establish cyber security rules, with explicit obligations for member states. The directive, both in its first form and in its later attempted revision (NIS2), has as its specific aim to achieve a high common level of cybersecurity across the Member States. The Directive sets strict incident reporting requirements, which are difficult to comply with for an organization without mature incident management processes and SIEM solutions. The purpose of this thesis is to analyze in depth the new revised directive "NIS2" and to define the framework of obligations that public organizations have. An important application parameter that can help achieve compliance with all technical aspects of the new NIS 2 directive is Security Information and Event Management (SIEM) systems. In this context, a case study will be developed in a public sector by deploying one of the most popular open source SIEM tool, AlienVault's OSSIM.