## 4 Methodology Strategies Preventing BEC Attacks
### NIS Directive and Greek Compliance
* Emphasis of the importance of secure supply chains and supplier relationships by mandating that individual companies address cybersecurity risks within their supply chains and supplier relationships. At the European level, this enhances supply chain cybersecurity measures for important information and communication technologies. In collaboration with the Commission and ENISA, Member States will conduct synchronized risk assessments of critical supply chains. * Implementation of stricter oversight measures for national authorities, the imposing of more rigorous enforcement requirements, and the aim to standardize sanction regimes among member states. * The strengthening of the influence of the Cooperation Group in shaping strategic policy decisions concerning emerging technologies. It promotes greater information sharing and cooperation among authorities of member states. Additionally, it improves operational collaboration, particularly in the realm of cyber crisis management. * The establishment of a fundamental framework to facilitate coordinated vulnerability disclosure for recently identified vulnerabilities throughout the EU. This also establishes an EU registry for this task, which will be operated by the European Union Agency for Cybersecurity (ENISA) [48]. In December 2022, the European Commission adopted a proposal for a revised Directive on Security and Information Systems--the 2022/2555 Directive [49]. The new Directive sets higher standards for cybersecurity for enterprises and the public sector, and it also makes accountable the executives of companies/enterprises in case of noncompliance. The key elements of the 2022/2555 Directive are:  
* The requirement that member states must adopt national cybersecurity strategies and designate or establish competent authorities, cyber crisis management authorities, single points of contact for cybersecurity (single points of contact), and computer security incident response teams (CSIRTs). * Requirements for entities in terms of managing cybersecurity risks for the following sectors: energy, transportation, banking, financial market infrastructures, health, drinking water, waste water, digital infrastructures, public administration, space, postal and courier services, waste management, manufacture production and distribution of chemicals, manufacture production and distribution of food, manufacturing, digital providers, and research. * Regulations and responsibilities regarding the sharing of cybersecurity information. * Obligations for member states in terms of supervision and enforcement. * The establishment of the European Cyber Crisis Liaison Organization Network (EU-CyCLONe), which aims to facilitate the coordinated handling of significant cybersecurity incidents and crises. This also ensures the consistent exchange of information between member states and various union institutions, bodies, offices, and agencies. * Specifies the overall criteria for imposing administrative fines on entities classified as essential and important. Greece's compliance with the Network and Information Systems (NIS) Directives can help to establish a strong cybersecurity framework that protects against a range of cyber threats, including Business Email Compromise (BEC) attacks. By implementing the NIS Directives, Greece can take proactive steps to reduce the risk of BEC attacks and enhance the security of its critical infrastructure. For example, one of the key measures taken when complying with the NIS directives is the implementation of multi-factor authentication (MFA) for email communication systems. MFA requires users to provide more than one form of identification to access their email account, such as a password and a verification code sent to their mobile phone. This additional layer of security can help to prevent unauthorized access to email accounts and reduce the risk of BEC attacks. Another important measure is the encryption of sensitive information transmitted via email.