Digital Economy Committee Discussion with E-Gov Ministry on NIS-2: Are You Ready for the New Cybersecurity Regulations? 

On November 15, 2024, the American Chamber of Commerce in Bulgaria (AmCham) hosted a business breakfast dedicated to the upcoming transposition of the European Union’s NIS-2 Directive into Bulgarian legislation. The event was organized under the Digital Economy Committee and brought together members and guests to explore the directive’s implications for businesses and recommendations for ensuring compliance with new cybersecurity requirements. The event was organized with the support of DGKV.

The event began with opening remarks from Anna-Marie Vilamovska, Co-Chair of the Digital Economy Committee. She welcomed all attendees, provided a brief overview of the agenda, and set the tone for the event by reminding everyone that while the session was informative and presentational, it was still a casual breakfast and participants were encouraged to enjoy themselves.

Opening Presentation: Legislative Overview of the NIS-2 Directive

The event continued with a presentation by Georgi Sulev, Senior Associate at Djingov, Gouginski, Kyutchukov & Velichkov. Sulev provided an insightful overview of the legislative framework of the NIS-2 Directive, focusing on:

  • The expanded scope of the directive, covering more sectors and entities than before.
  • New regulatory obligations for essential and important entities, including risk management and incident notification.
  • Strict penalties for non-compliance, including significant fines for entities and their leadership.
  • Proposed amendments to the Bulgarian Cybersecurity Act to incorporate NIS-2 provisions.

Takeaway: Georgi Sulev emphasized the importance of understanding the directive’s legal obligations and potential penalties, urging businesses to prepare proactively.

Practical Implementation Insights

The second presentation featured Biserka Radeva, Head of the Department Cybersecurity Analysis and Research at the Ministry of Electronic Governance, and Simeon Kartselyanski, National Coordinator for Cybersecurity at Information Services. They discussed:

  • The role of public authorities in identifying and monitoring essential and important entities.
  • Challenges and opportunities in aligning with the directive’s requirements, particularly in risk management and reporting.
  • The importance of fostering a culture of cybersecurity awareness within organizations.

Their presentation transitioned into a lively Q&A session to ensure audience engagement and address pressing questions.

Takeaway: The speakers provided practical steps for organizations to comply with the directive, highlighting the need for early preparation and implementation of robust cybersecurity measures.

Q&A Session

The interactive session featured Biserka Radeva, Simeon Kartselyanski, and AmCham Digital Economy Committee Co-Chairs Anna-Marie Vilamovska and Plamen Zhechev. Discussions covered:

  • Implementation of timelines and the division of responsibilities.
  • Anticipated challenges for businesses in adapting to the directive.

The event concluded with a call for businesses to prepare early, adapt their cybersecurity frameworks, and engage with authorities to ensure compliance with the directive. The Digital Economy Committee continues to provide a platform for critical discussions on digital transformation and regulatory challenges.