On December 14^th, 2022, the European Parliament and the Council adopted the NIS 2 Directive, which adjusts the legal framework for cybersecurity across the EU, and EU Member States have until October 17^th, 2024 to incorporate NIS 2 into their national law and make it an applicable regulation. The new directive aims to eliminate differences and conflicts among EU member states by establishing minimum rules on the harmonization of regulatory activities, as well as mechanisms and remedies for effective cooperation between authorities to better address cybersecurity threats. At the same time, NIS 2 also puts forward higher cyber environment security requirements for basic and important entities operating within the EU.

Although the EU member states have not yet developed a list of legally bound entities and specific standards, we as a leader in the global video security industry, have always paid great attention to the construction of network security infrastructure and product safety system construction, and have passed the international independent third party certification audit, the relevant system certification includes:

· ISO20000-1 Information technology — Service management — Part 1: Service management system requirements;

· ISO27001 Information technology — Security techniques — Information security management systems — Requirements;

· ISO27017 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services;

· ISO27018 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors;

· ISO27701 Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirements and guidelines;

· ISO28000 Specification for security management systems for the supply chain.

Our measures comply with all of these requirements of NIS 2:

1. Regular security risk assessment and management;

2. Supply chain security;

3. Business continuity (backup, recovery);

4. Security risk handling and emergency response policies;

5. Security of networks and information systems (development, maintenance);

6. Vulnerability handling and disclosure;

7. Cybersecurity training system;

8. Data encryption;

9. Human resources security, access control and asset management policies.

We are constantly committed to supporting our customers’ needs, and keep close eye on the progress of NIS 2 and improve the relevant system proactively. If you have any questions, please feel free to contact us.

Thank you for your trust and support all the time!

With regards,

Zhejiang Uniview Technologies Co., Ltd