NIS2 Blog
News, analysis and practical guides on cybersecurity and the NIS2 directive.

NIS2 Article 20: 5 Boardroom Responsibilities Directors Cannot Delegate
Article 20 of Directive 2022/2555 moves cybersecurity formally into the boardroom. Here are the five responsibilities that now fall personally on directors.

NIS2 Incident Notification: The Practical 72-Hour Guide
A cyber incident strikes. The NIS2 clock starts. Here is exactly what you must do, hour by hour.

NIS2 Supply Chain Security: 5 Clauses to Require from Your Suppliers
Article 21(2)(d) of Directive 2022/2555 explicitly mandates supply chain security. Here are 5 concrete contractual clauses to add to every critical supplier contract.

NIS2 Sanctions: What Directors Really Risk
Fines, personal liability, management bans — NIS2 penalties are severe. What you need to know.

NIS2 and MSPs: New Obligations and Commercial Opportunities
NIS2 transforms the role of Managed Service Providers. New obligations, expanded responsibilities, and how to turn compliance into a competitive advantage.

NIS2: Which Organisations Are Affected and What They Must Do
Who is really affected by NIS2? Discover the criteria, sectors and first obligations to implement.
