NIS2 Article 23 requires an early warning within 24 hours and a full notification within 72 hours. Miss either deadline and the failure to report is itself a violation. Complete guide to the four-phase NIS2 incident reporting timeline.
NIS2 fines reach €10 million or 2% of global turnover for essential entities — and Article 20 makes directors personally liable. Full breakdown of NIS2 penalties, supervisory measures, and how to protect yourself.
Does NIS2 apply to your organisation? Complete guide to NIS2 scope: 18 sectors, Essential vs Important entities, size thresholds, always-in-scope rules, and a 5-step self-assessment.
Complete NIS2 compliance checklist covering all 7 phases and 59 actionable items — governance, risk assessment, all 10 Article 21 measures, incident management, supply chain, training, and testing. Free PDF download.
A complete guide to all 10 NIS2 Article 21 cybersecurity risk management measures — what each requires, the CIR 2024/2690 Annex sections that define them, the documents you need to prove compliance, and how to prioritise your implementation programme.
The NIS2 Directive (EU 2022/2555) is the EU’s updated cybersecurity law. Learn who it applies to, what it requires, penalties for non-compliance, and how to achieve compliance in 2026.
