NIS2 compliance guides and resources
A real Svenska Kraftnät breach mapped to Sweden’s NIS2 energy reporting clock — plus what changed for energy operators under Cybersäkerhetslagen on 1 July 2026.
Belgium has only 2 BELAC-accredited auditors for every essential hospital’s NIS2 deadline. Here’s what the CCB requires and how to move fast.
DORA covers Intesa Sanpaolo, UniCredit, and Banco BPM’s cyber risk — but Italy’s ACN and CSIRT Italia still hold a registration claim NIS2 doesn’t let go of.
Poland’s NIS2 energy rules just handed URE the whistle: see if you’re a ‘podmiot kluczowy,’ what PSE’s double cyber-regime means, and Orlen’s new scope.
Poland’s KNF supervises both NIS2 and DORA for PKO BP, Pekao, and mBank. See what Article 8i KSC still requires before the October 2026 deadline.
Not every Polish factory is NIS2-scoped — see the exact NACE test separating Volkswagen Poznań from KGHM’s smelters, plus S46 deadlines and penalties.
A 30-employee Italian workshop can still be in NIS2 Annex II scope. See ACN’s linked-enterprise rules and what it means for your factory.
Your ASL defaults to NIS2’s important tier; your AOU is essential almost by size alone — the ACN mechanism, decoded.
AENA, ADIF, and Spain’s 28 port authorities all face NIS2 — but not the same CSIRT. The routing split, the PIC overlay, and the penalties, explained.
REE answers to three Spanish regulators under NIS2, not two: CNPIC, CNMC, and INCIBE-CERT — never CCN-CERT. Here is the energy-sector split explained.
