NIS2 in Spain: How the INCIBE-CERT vs CCN-CERT Split Determines Who Regulates Your Organisation
Which NIS2 authority supervises your Spanish operations — INCIBE-CERT or CCN-CERT? ENS overlap, draft law status, €10M penalties, and action steps.
-
-
Operating in France Under NIS2? What ANSSI Requires That Your EU Compliance Plan Likely Misses
Your EU NIS2 programme likely has gaps for France: ANSSI’s ReCyF has 20 objectives and ISO 27001 covers only 2. Here’s what to fix before registration opens.
-
NIS2 in Germany: What Multinationals Must Actually Do Under BSIG 2.0 — BSI Registration, KRITIS Overlap, and Penalty Exposure
Germany’s NIS2 via BSIG 2.0: BSI registration, KRITIS scope, personal management liability, and ICT component prohibition. Step-by-step guide for multinationals.
-
Operating in Italy? NIS2 Is Now Law — Here’s What ACN Requires from Your Business
Italy NIS2 is live. ACN notified entities in April 2025 — learn registration steps, CSIRT reporting rules, and the October 2026 compliance deadline.
-
NIS2 Network Security: The 4-Zone Segmentation Model That Satisfies CIR Annex Requirements
Most networks don’t meet CIR Annex 6.7 and 6.8 — here’s the 4-zone segmentation model that satisfies NIS2 network security requirements.
-
NIS2 Vulnerability Management Under CIR Annex 6: Patch SLAs by CVSS Score, OT Compensating Controls, and CVD Requirements
CIR Annex 6 §6.6 and §6.10 impose separate patch management and vulnerability handling obligations. Includes CVSS-tiered patch SLA table, OT compensating controls framework, and CVD procedure requirements for NIS2 compliance.
-
What NIS2 CIR 2024/2690 Actually Requires for Logging: Retention Windows, SIEM Specs, and Anomaly Detection Rules
Stop guessing which CIR section covers NIS2 logging — Section 3.2’s 7 controls explained with retention windows, SIEM specs, and real MSSP cost data.
-
NIS2 Asset Management in Practice: Build Your CIR Annex 12 Inventory in 5 Steps
How to build a NIS2-compliant asset inventory: 5-step CIR Annex 12 guide covering hardware, software, shadow IT, cloud assets, and the evidence auditors will check.
-
The 90-Day NIS2 Compliance Plan for SMEs: Week-by-Week Deliverables, No Consultant Required
Enforcement is live. This 90-day plan maps every week to specific NIS2 deliverables and templates—so your SME can achieve defensible compliance without a consultant.
-
NIS2 Compliance Cost: EUR 15K–200K Budget Tiers vs. EUR 10M Penalty Exposure
Your NIS2 compliance budget is 0.15%–2% of your maximum fine exposure. Three SME cost tiers, six line items each — see what you should actually budget.
