Shape

Industry

OT cybersecurity for water and energy: preparing for NIS2

Dispersed installations, many remote accesses and physical consequences in case of incident: OT cybersecurity is a matter of service continuity.

Context

Regulatory context

  1. Water and energy are among the sectors covered by the NIS2 directive.

  2. In France, the Resilience Act transposing it is debated in plenary session at the National Assembly on 7 October 2026; obligations will follow publication of the decrees and orders.

Challenges

Your challenges

Many remote sites

Stations, substations, reservoirs: each brings remote access and links to inventory and secure.

Legacy equipment

PLCs and SCADA in service for years, hard to update without operational risk.

Strict access rules

Electrical clearance and site-specific rules: our work complies with them.

FAQ

Frequently asked questions

Are local authorities in scope of NIS2?

The exact scope depends on the final French text and its decrees. Water and energy operators are among the sectors targeted by the directive: an assessment lets you prepare without waiting.

Can you audit contractors’ remote access?

Yes, it is one of the first items of the assessment: inventory of access paths, maintenance accounts, traceability and recommendations.

A regulatory deadline is coming up?

Let’s talk about your site or product. One call is enough to know where to start.

Shape