7. Regulatory aspects

Cybersecurity legislation in Europe has become increasingly stringent in recent years, and regulatory compliance is becoming an important issue for companies. The threat of heavy financial penalties for non-compliance is real.

In addition to the regulations applicable to all information systems, industrial facilities may be affected by specific texts if they belong to an operator of vital importance (OIV), a term defined below. In this case, they fall under the Military Programming Law (LPM) supplemented by the NIS Directive (EU) 2016/1148 of July 6, 2016. If the facility is one of the Seveso-classified establishments, it is also concerned by Directive 2012/18/EU of July 4, 2012, known as the "Seveso 3 Directive".

The law creates obligations for OIVs, as a cyber attack can lead to an inability to produce or provide required services, and...