Article 20 Can Get a Director Suspended: The 3 Legal Obligations NIS2 Governing Bodies Must Meet
NIS2 Article 20 can get a director suspended. The 3 governing body obligations — approve, oversee, and train — and what documented compliance requires.
-
-
NIS2 Personal Liability, €10M Fines, and Dual Reporting: A Legal Counsel’s Action Guide to Article 20 Compliance
NIS2 holds management bodies personally liable under Article 20. Legal counsel’s guide to dual reporting, supplier contracts, and cross-border jurisdiction rules.
-
NIS2 Article 21(2)(d) Is Changing Your B2B Contracts: A Supplier’s Guide to New Security Requirements
Your EU customer isn’t directly handing you a NIS2 obligation — but Article 21(2)(d) means their compliance problem is landing in your contracts. Here’s exactly what you’ll be asked to sign, prove, and deliver.
-
NIS2 for Search Engines and Social Networks: Annex II Scope, Article 21 Controls, and GDPR Dual Reporting
NIS2 marks search engines and social networks as important entities. Article 21 controls, GDPR dual reporting, and EU representative rules—explained.
-
The Oldsmar Attack Revealed What NIS2 Annex I Now Requires of Drinking Water Utilities
Drinking water utilities are NIS2 Annex I Sector 6 essential entities. Learn what the Oldsmar attack reveals about your Article 21 SCADA obligations.
-
How a Single ICT Service Management Provider Breach Cascades Across Client Networks — NIS2 Annex I Obligations Explained
When an ICT provider suffers a breach, every client essential entity faces its own NIS2 notification clock. Here’s what Annex I Section 9 requires from ICT service management providers.
-
NIS2 Names MSPs and MSSPs as Annex I Essential Entities — The Obligations That Cannot Be Delegated to Clients
MSPs and MSSPs are Annex I essential entities under NIS2. Understand your Article 21 obligations, CIR 2024/2690 remote management tool requirements, and dual notification rules.
-
Your Online Marketplace Is an NIS2 Important Entity: 7 Security Requirements Platform Operators Must Document Before an Audit
Platform unavailability affecting 5% of EU users triggers NIS2 reporting under CIR Article 11. 7 compliance requirements for online marketplace operators.
-
NIS2 Chemicals Sector: How a Cyberattack Can Trigger a Toxic Release — and What Article 21 Requires
Triton malware targeted SIS at a Saudi petrochemical plant. What NIS2 Article 21 requires for chemical plants — and why it is a physical safety obligation.
-
NIS2 Annex II, Section 3: 5 Compliance Priorities for Postal and Courier Operators Before Their First Incident Report
Royal Mail paid £10m after a sorting hub attack. Here are the 5 priorities a postal or courier operator must address before the Article 23 clock starts.
