{"id":1586,"date":"2025-05-12T14:41:58","date_gmt":"2025-05-12T11:41:58","guid":{"rendered":"https:\/\/sgklegal.gr\/?p=1586"},"modified":"2025-05-12T14:46:25","modified_gmt":"2025-05-12T11:46:25","slug":"cybersecurity-jmd-1689-2025","status":"publish","type":"post","link":"https:\/\/sgklegal.gr\/en\/cybersecurity-jmd-1689-2025\/","title":{"rendered":"Cybersecurity: What do you need to know about the JMD 1689\/2025"},"content":{"rendered":"<p data-start=\"143\" data-end=\"414\">Pursuant to Joint Ministerial Decision 1689\/2025 (Government Gazette B\u2019 2186), the <strong data-start=\"226\" data-end=\"275\">National Cybersecurity Requirements Framework<\/strong> is now in effect for \u201cessential\u201d and \u201cimportant\u201d entities under Law 5160\/2024, which transposes the NIS2 Directive into Greek legislation.<\/p>\n<p data-start=\"416\" data-end=\"682\">This Ministerial Decision introduces <strong data-start=\"453\" data-end=\"492\">mandatory cybersecurity obligations<\/strong> for public and private sector organizations that provide critical services or operate in key sectors such as health, transport, digital infrastructure, energy, financial services, and more.<\/p>\n<p data-start=\"684\" data-end=\"720\">\ud83d\udd0e <strong data-start=\"687\" data-end=\"720\">What is practically required:<\/strong><\/p>\n<p data-start=\"722\" data-end=\"1081\">\u2714 Development and implementation of cybersecurity policies and procedures<br data-start=\"795\" data-end=\"798\" \/>\u2714 Appointment of an Information Security Officer (\u03a5.\u0391.\u03a3.\u03a0.\u0395.)<br data-start=\"859\" data-end=\"862\" \/>\u2714 Risk assessments and penetration testing<br data-start=\"904\" data-end=\"907\" \/>\u2714 Vulnerability, incident, and supply chain management<br data-start=\"961\" data-end=\"964\" \/>\u2714 Technical measures such as encryption and access control<br data-start=\"1022\" data-end=\"1025\" \/>\u2714 Training and awareness for staff and senior management<\/p>\n<p data-start=\"1083\" data-end=\"1463\">\ud83d\udccd At <strong data-start=\"1089\" data-end=\"1150\">Stergios Konstantinou &amp; Associates Law Office \u2013 SGK Legal<\/strong>, we have already developed a <strong data-start=\"1180\" data-end=\"1218\">comprehensive compliance checklist<\/strong>, mapping the requirements of the Decision article by article, including documentation examples and priority levels for each action point.<br data-start=\"1356\" data-end=\"1359\" \/>If you represent an entity subject to this regulation, now is the time to plan your compliance strategy.<\/p>\n<p data-start=\"1470\" data-end=\"1515\">\ud83d\udee1\ufe0f <strong data-start=\"1474\" data-end=\"1515\">How we can support your organization:<\/strong><\/p>\n<p data-start=\"1517\" data-end=\"1803\">\u2022 Gap Analysis and compliance reports<br data-start=\"1554\" data-end=\"1557\" \/>\u2022 Drafting cybersecurity policies and contract adjustments<br data-start=\"1615\" data-end=\"1618\" \/>\u2022 Legal support for the implementation of JMD 1689\/2025<br data-start=\"1673\" data-end=\"1676\" \/>\u2022 Tailored training seminars for management &amp; staff<br data-start=\"1727\" data-end=\"1730\" \/>\u2022 Strategic advisory on alignment with the NIS2 Directive (Law 5160\/2024)<\/p>\n<p data-start=\"1805\" data-end=\"1919\">\ud83d\udce9 Feel free to contact us for more information or to schedule a consultation to assess your organization\u2019s needs.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pursuant to Joint Ministerial Decision 1689\/2025 (Government Gazette B\u2019 2186), the National Cybersecurity Requirements Framework is now in effect for \u201cessential\u201d and \u201cimportant\u201d entities under Law 5160\/2024, which transposes the NIS2 Directive into Greek legislation. This Ministerial Decision introduces mandatory cybersecurity obligations for public and private sector organizations that provide critical services or operate in [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1584,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[236,69,235,237,68],"class_list":["post-1586","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-en","tag-ciso","tag-cybersecurity-en","tag-jmd-1689-2025","tag-legal-compliance","tag-nis-2-en"],"_links":{"self":[{"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/posts\/1586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/comments?post=1586"}],"version-history":[{"count":1,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/posts\/1586\/revisions"}],"predecessor-version":[{"id":1587,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/posts\/1586\/revisions\/1587"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/media\/1584"}],"wp:attachment":[{"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/media?parent=1586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/categories?post=1586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgklegal.gr\/en\/wp-json\/wp\/v2\/tags?post=1586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}