Cyber Risk Management in a Changing Regulatory Environment

As an essential activity, wind power is subject to both the NIS2 and CER directives, which impose requirements for risk analysis, physical resilience, incident reporting and supervision. The directives aim to strengthen national cybersecurity efforts and coordination at EU level. After the turn of the year, Swedish legislation will come into force, imposing new requirements on wind power operators. But what does this mean in practice for the industry?

In this session, we explore the impact of these regulations on the wind energy sector, with a particular focus on how operators can adapt to the new requirements. Vestas shares its preparations and efforts to meet these upcoming directives, and we discuss how the industry can ensure its resilience to cyber threats in an increasingly regulated environment.