UPDATED 1 Sept: The EI library in London is temporarily closed to the public, as a precautionary measure in light of the ongoing COVID-19 situation. The Knowledge Service will still be answering email queries via email , or via live chats during working hours (09:15-17:00 GMT). Our e-library is always open for members here: eLibrary , for full-text access to over 200 e-books and millions of articles. Thank you for your patience.
New Energy World
New Energy World embraces the whole energy industry as it connects and converges to address the decarbonisation challenge. It covers progress being made across the industry, from the dynamics under way to reduce emissions in oil and gas, through improvements to the efficiency of energy conversion and use, to cutting-edge initiatives in renewable and low carbon technologies.
Navigating the new EU security directive for the energy sector
8/1/2025
8 min read
Feature
The European Union's Network and Information Security Directive (NIS2) is introducing stricter cyber security requirements for the energy sector, including power plants, hydrogen producers, wind farms, and oil and gas operations. However, it is not just European companies that need to prepare for NIS2, but also the global supply chains of EU-based energy companies, says Sudhir Ethiraj, Global Head of Cyber Security Office and CEO Business Unit Cyber Security Services at TÜV SÜD.
The energy sector’s importance for economic and social prosperity has put it in the crosshairs of cyber criminals. According to the European Network and Information Security Agency (ENISA), more than 200 cyber incidents were reported in the energy sector in 2023 alone. The key targets are data, information or the deliberate disruption of critical infrastructure. Although the big players in the energy sector are generally well protected, the route via third parties in the supply chain is often easier.
The energy sector is very often a high potential target of cyber attacks. Last year the EU adopted the NIS2 Directive to respond to the threat and prevent failure of critical infrastructure.
The NIS2 is an update of the existing European Union Network and Information Security (NIS) Directive. It is designed to harmonise the level of IT security in all EU member states and increase their resilience to cyber attacks. NIS2 focuses on improving the cyber security of networks and information systems necessary for the provision of essential services and critical infrastructure.