EU NIS Representative

Who needs a representative?

OES (operators of essential services)

These are critical infrastructure organisations in the energy, transport, banking, financial market infrastructures, healthcare, water and digital infrastructure sectors.

DSPs (digital service providers)

DSPs provide specific types of digital services, operating as an online marketplace, online search engine and/or Cloud computing service.

Note that DSPs with fewer than 50 employees and an annual turnover of less than €10 million are exempt.

Appointing a NIS Directive representative

OES and DSPs that are not established in the EU but provide services within the EU that fall within the scope of the Directive must appoint a NIS Directive representative. The representative must be based in an EU member state in which the OES or DSP offers those services.

Our EU NIS Representative service is delivered by our sister company IT Governance Europe Ltd based in the Republic of Ireland.

As your NIS Directive representative, we will:

•  Register as your representative with the appropriate competent authority;
•  Act as your point of contact with your competent authority;
•  Act on your behalf as liaison for incident reporting to your competent authority for up to three incidents per annum;
•  Act as the initial point of contact for communications received from a competent authority regarding data privacy incidents or other NIS Directive-related enquiries;
•  Act as the initial point of contact for communications received from individuals regarding a specific security incident or other NIS Directive-related enquiries; and
•  Assist with the wording of informative communications with customers, clients and other stakeholders regarding any notifiable security incidents.

 Download the service description.

We also offer UK NIS Representative services. Depending on where your organisation operates, you may be required to appoint both an EU NIS Directive and a UK NIS Regulations representative.

Conditions

Single-entity organisations with 1–500 employees are eligible for this service. As your NIS Directive representative, we will assist you with reporting up to three incidents per annum. Assistance with additional reporting can be provided at £200 per hour.