NIS 2 - The European directive that reshapes cybersecurity for all companies
Starting in 2024, companies in European Union are required to implement cybersecurity measures and report cyberattacks. Most companies are impacted, either directly - by falling under the legislation - or indirectly, through their business partners’ compliance.
In other words, even if a company is not directly targeted, it could still be affected because its suppliers or clients are.
Companies that fail to comply with NIS 2 regulations risk fines of up to 10 million euros or 2% of their annual turnover.
More than 20 industries are impacted by NIS 2
Deadline for transposing NIS 2 into national legislation: October 17