As cybersecurity threats become increasingly sophisticated, both businesses and governments around the world are seeking ways to strengthen their defences. In Europe, the Network and Information Security Directive (NIS2) is a crucial regulatory update aimed at improving cybersecurity resilience across Member States. Implementing NIS2 requires a multi-faceted approach that not only involves large critical infrastructure but also extends essential cybersecurity tools and training to small and medium-sized enterprises (SMEs).
In Wallonia, the francophone region of Belgium, the Agence du Numérique (Digital Agency) is driving efforts to support NIS2 compliance through its Cyberwal by digital wallonia programme. Among its strategic moves, Cyberwal leverages the Global Cyber Alliance (GCA) Cybersecurity Toolkit for Small Business to offer practical, accessible solutions to SMEs.
Understanding NIS2 and Its Implications
The NIS2 Directive builds on the 2016 NIS Directive, which was the first piece of EU-wide legislation on cybersecurity. It aims to improve the resilience of essential services and critical infrastructure by mandating stronger cybersecurity measures, stricter reporting obligations, and improved incident response frameworks.
Implementation of NIS2 involves key sectors such as energy, health, transportation, and digital infrastructure. But significantly, NIS2 also acknowledges the crucial role that SMEs play in the supply chains of these essential services. As SMEs increasingly become targets of cyberattacks, ensuring their cybersecurity resilience has become a national priority.
Belgian SMEs, like many others, however, often face limited budgets, a lack of in-house cybersecurity expertise, and competing business priorities, making it challenging to implement robust cybersecurity frameworks. This is where Cyberwal by digital wallonia and its use of the GCA Cybersecurity Toolkit for Small Business come into play.
Cyberwal by Digital Wallonia: A Regional Strategy with National Impact
Cyberwal is an initiative by the Agence du Numérique within the digital wallonia strategy, which aims to elevate Wallonia’s digital ecosystem by enhancing connectivity, digital literacy, and cybersecurity. Cyberwal specifically focuses on raising cybersecurity awareness, providing training, and supporting cybersecurity innovation to help Wallonia’s organisations, especially SMEs, enhance their resilience against cyber threats.
Core objectives of Cyberwal by digital wallonia:
- Mobilisation: Through workshops, webinars, and informational campaigns, Cyberwal raises awareness and mobilises SMEs to implement best practices against cyber risks.
- Support: Cyberwal provides guidance to help SMEs with cybersecurity requirements and financial support to hire an external cybersecurity vendor if necessary.
- Access to Resources: Recognising the budget constraints that SMEs often face, Cyberwal provides the GCA Cybersecurity Toolkit, a set of free cybersecurity tools, to enhance security without requiring heavy investments.
The implementation of NIS2 is a complex undertaking that demands participation from organisations of all sizes. For Belgian SMEs, the Cyberwal by digital wallonia initiative offers a unique opportunity to enhance their cybersecurity maturity, meet regulatory requirements, and ultimately build greater resilience against cyber threats. By investing in cybersecurity through tailored programs for SMEs, Wallonia is setting an example of how regional strategies can support national goals, strengthening not just individual businesses but the wider digital ecosystem.
The GCA Cybersecurity Toolkit for Small Business: A Practical Solution
GCA developed the Cybersecurity Toolkit for Small Business to give micro and small enterprises access to essential cybersecurity tools. The toolkit is designed specifically to mitigate common cybersecurity risks, and it offers a range of resources that are practical, free, and easy to implement.
Key components of the toolkit and their relevance to NIS2:
- Security of Email and Communication: Phishing and ransomware attacks are major threats to businesses. The toolkit includes tools like the GCA DMARC Setup Guide, which helps organisations implement the Domain-based Message Authentication, Reporting, and Conformance (DMARC) protocol to prevent email spoofing and phishing attacks. This aligns with NIS2’s emphasis on protecting information systems against unauthorised access.
- Strong Authentication Practices: Multi-factor authentication (MFA) is an essential step in preventing unauthorised access. The GCA toolkit includes guidance on implementing MFA, an essential cybersecurity practice endorsed by NIS2, to secure both employee and customer accounts.
- DNS Security: The toolkit provides access to Quad9, a free DNS security service that blocks access to known malicious websites while protecting user privacy. This can reduce malware infections and mitigate the success of phishing attempts.
- Data Backup Solutions: Regular data backups are a straightforward yet vital cybersecurity measure. The toolkit offers guidance on implementing reliable backup systems to safeguard critical data, a requirement emphasised by NIS2 for business continuity.
- Cyber Hygiene and Employee Training: The toolkit includes resources on cybersecurity awareness training, helping SMEs instil good cyber hygiene practices among employees, given that human error is one of the most significant factors in data breaches.
Since the partnership was announced in January 2024, the toolkit in French has been viewed approximately 8,000 times with an engagement rate of up to 87%. Cyberwal by digital wallonia has integrated the GCA Cybersecurity Toolkit into its training programs, webinars, and online resources for SMEs. Some 2024 activities include:
- Forum InCyber (FIC) 2024 in Lille in March 2024: Jeremy Grandclaudon, Project Manager at Agence du Numérique, presented digital wallonia and the GCA Cybersecurity Toolkit at the Pavillon in front of a full room of cybersecurity experts.
- Webinar for SMEs in the Health Sector in April 2024: Kayle Giroud, Director of Common Good Initiatives at Global Cyber Alliance, presented the GCA Cybersecurity Toolkit, with nearly 100 registrations showing a strong interest from the health sector for practical cybersecurity solutions.
- Cyber Week in Wavre in October 2024: Kayle Giroud presented the GCA Cybersecurity Toolkit to more than 60 SMEs and cybersecurity professionals from Wallonia as part of the Cybersecurity Awareness Month.
Access here the article in French published by Digital Wallonia.
