Logo_100yearsAfnor_CMYK_White
Home > International news > Compliance with NIS2 and DORA directives: The importance of ISO/IEC 27001 and ISO 22301 certifications for businesses

Compliance with NIS2 and DORA directives: The importance of ISO/IEC 27001 and ISO 22301 certification for businesses

Facebook
Email
Twitter
LinkedIn
Agri-food expertise

In an environment where cyber threats are omnipresent and the resilience of information systems is crucial, it is becoming imperative for companies to comply with new regulations. The NIS2 (Network and Information Security 2) and DORA (Digital Operational Resilience Act) directives impose stringent security and business continuity requirements. This is where ISO/IEC 27001 and ISO 22301 certifications come into play.

The NIS2 and DORA directives were introduced by the European Union to strengthen cybersecurity and ensure the resilience of critical infrastructures and digital services. NIS2 aims to improve the cyber resilience of critical sectors by imposing strict security measures, incident reporting obligations and enhanced cooperation between member states. DORA, meanwhile, focuses on the operational resilience of financial entities, ensuring that they can withstand and recover from digital disruptions, whether caused by cyber attacks or other technological incidents.

ISO/IEC 27001 certification is an internationally recognized standard for information security management. It provides a framework for establishing, implementing, maintaining and continuously improving an information security management system (ISMS). The standard requires a comprehensive risk analysis, enabling companies to identify and address vulnerabilities that could compromise information security. It also proposes specific controls to protect information, thereby reducing the risk of cyber-attacks. By establishing procedures for managing security incidents, this standard aligns perfectly with the reporting requirements of the NIS2 and DORA directives. What's more, ISO/IEC 27001 encourages a proactive approach to constantly improving security measures and staying in line with ever-changing regulations.

ISO 22301 certification focuses on business continuity management. It helps organizations prepare for, respond to and recover from disruptions, ensuring operational resilience. The standard requires companies to assess the potential impact of incidents on their operations, and to develop business continuity plans. It provides guidelines for developing continuity strategies and solutions, in line with DORA's resilience requirements. By including disaster recovery plans adapted to the most critical disruption scenarios, it ensures rapid resumption of operations. ISO 22301 also encourages regular testing of continuity plans to ensure their effectiveness in the event of real incidents, a key requirement of the NIS2 and DORA directives.

In summary, ISO/IEC 27001 and ISO 22301 certifications play a crucial role in supporting compliance with the NIS2 and DORA directives, offering:

  • a risk-based approach
  • tighter cyber security controls
  • business continuity and incident response
  • preparation for regulations
  • improving stakeholder confidence.

AFNOR International is a trusted player in the field of certification and training, offering recognized expertise and tailor-made services to help companies achieve compliance. With decades of experience, AFNOR International has a team of experts who understand the specific challenges of each sector and the requirements of ISO standards. Services are tailored to the unique needs of each organization, ensuring effective implementation of ISO/IEC 27001 and ISO 22301. AFNOR certification is recognized worldwide, reinforcing the credibility and confidence of partners, customers and regulatory authorities. In addition, AFNOR International accompanies companies throughout the certification process, offering practical advice and ongoing support to maintain compliance and improve resilience.

Read more :

latest news
from the international network

Agri-food expertise
Taiwan

Building Global Trust Through a Century of Experience—AFNOR Successfully Hosts the 2026 Annual General Meeting of the International Organization for Standardization (ISO)

From September 28 to October 2, the 2026 International Organization for Standardization (ISO) Annual General Meeting, hosted by the French Standards Association (AFNOR), was successfully held in Paris, France. As AFNOR celebrated its 100th anniversary, representatives from standardization bodies, policymakers, industry experts, and industry representatives from more than 170 countries and regions around the world gathered in Paris to discuss the key role of international standards in addressing common global challenges. The theme of this year’s conference was “Building Trust in a Changing World.” The agenda centered on three key areas: “People and the Planet,” “Emerging Technologies and Artificial Intelligence,”“Trade and Development.” On the first day of the conference, ISO/UNDP 53001:2026, “United Nations Sustainable Development Goals Management System—Requirements,” was released to help organizations transform the Sustainable Development Goals from commitments into actions that can be managed, implemented, and measured. The conference also hosted a special session on the new ISO 9001 Quality Management System standard, featuring discussions on how quality management can help organizations turn trust into a strategic advantage. This year’s conference heard the ISO Secretary-General’s work report and focused on reviewing major governance matters, including the implementation of “ISO Strategy 2030,” the digital transformation of standards, business policy, the election of governance officers for the 2027–2029 term, and the 2027 financial budget. The winners of the 2026 Lawrence E. Archer Leadership Award were also announced. Throughout its century-long history, AFNOR has consistently been a key participant and driving force in global standardization governance. During the meeting, following a proposal by AFNOR and approval by ISO members, ISO officially released the “Paris Declaration” on addressing climate change in the global standards sector, calling on member countries to rely on international standards to strengthen climate adaptation capacity and development resilience, and to advance the implementation of the global Sustainable Development Goals.

Read more "
Taiwan

"Fobiao International Certification" Completes ISO 14064-1 Greenhouse Gas Inventory Verification for "Formosa Biotech"

“Fabao International Certification” recently announced that “Formosa Biotech” has successfully passed the ISO 14064-1:2018 greenhouse gas inventory verification, and a certification ceremony was held recently. This verification confirms that the company’s greenhouse gas emissions data and management system comply with international standards. As an internationally recognized third-party verification body, “Fabo International Certification” conducted this verification in accordance with the ISO 14064-1 standard,and conducted an independent assessment of Formosa Biotech’s organizational boundaries, identification of emission sources, and data collection and calculation processes. The verification process confirmed that the company has established a systematic foundation for carbon management, and that its inventory results are complete and reliable, serving as a basis for developing future carbon reduction strategies. To promote sustainable development, “Formosa Biotech” has not only completed its greenhouse gas inventory but has also implemented the principles of the circular economy in its product bottle recycling program, enabling resources to re-enter the circular system and reducing resource consumption and carbon emissions at the source. Through systematic management, the company has demonstrated concrete actions ranging from carbon inventory and carbon reduction initiatives to resource recycling. The professional verification team at “Fabao International Certification” noted that a company’s successful verification of its greenhouse gas inventory indicates it has established a credible carbon management mechanism capable of assessing its environmental performance using scientific data. “Formosa Biotech” has established a management system compliant with international standards, setting an important practical example for the net-zero transition of Taiwan’s biotech industry. “Fabao International Certification” has long provided greenhouse gas inventory verification services, assisting various industries in establishing credible environmental performance data. In the future, it will continue to promote the implementation of low-carbon sustainability goals across Taiwan’s industries through professional verification.

Read more "
Taiwan Banner
Taiwan

「法標國際認證」完成「新光醫院」ISO 14067產品查證

「已成功通過ISO 14067:2018產品碳足跡查證,查證範圍涵蓋健檢中心之無痛腸胃鏡、MRI、CTA、PET,以及血液透析、腹膜透析等六項醫療服務。此項查證確認該院醫療服務之碳排放數據與管理制度符合國際標準要求。 ISO 14067標準,對「新光醫院」各項醫療服務之碳足跡範圍界定、數據蒐集、計算方法及排放係數選用進行獨立評估。查證範圍涵蓋高階影像設備能源使用、RO逆滲透水處理、醫療耗材及病患交通等生命週一致性與透明度。 「新光醫院」將碳足跡管理導入醫療服務現場,透過系統化盤查掌握各項服務之碳排放熱點,為後續減碳措施提供科學依據。此項查證展現醫療機構將環境績效納入服務管理系統之具體作為。 「法標國際認證」專業查證團隊指出,醫療服務通過產品碳足跡查證,代表「新光醫院」已建立可量化、可檢視之碳管理基礎。「新光醫院」建立符合國際標準之管理,為台灣醫療產業之淨零轉型建立重要實踐案例。 「法標國際認證」長期提供產品碳足跡查證服務,協助各產業建立可信之環境促進醫療及相關產業落實低碳永續目標。

Read more "
Back to top