Metso is committed to meeting applicable cybersecurity regulatory requirements, including the EU Network and Information Security Directive (NIS2) and its national implementations.

Our approach to NIS2 is based on established cybersecurity governance and risk management practices, covering areas such as information security, incident management, business continuity, supply chain security, and vulnerability management.

Metso's ISO/IEC 27001-certified Information Security Management System (ISMS), covering global IT functions, provides a strong foundation for these practices. We continuously develop our cybersecurity capabilities and address applicable NIS2 obligations across relevant Metso operations.

We also recognize our role in our customers' supply chains and work to address cybersecurity requirements relevant to the products and services we provide.