NIS2 compliance guides and resources
Does NIS2 apply to your public body? Art. 2(7) exclusion, GovCERT vs. CSIRT routing in DE, AT, and NL, and what your Art. 23 notification must contain.
The KA-SAT attack hit approximately 5,800 wind turbines across Europe in hours — here’s the Art. 23 reporting timeline your ground station would have had to follow.
Your ECDIS runs Windows XP and your BWMS can’t be patched — here’s how to satisfy NIS2 Article 21(2)(e) anyway, with a clause-by-clause IMO-to-NIS2 map.
EASA Part-IS ISMS controls map partially to NIS2 Article 21(2)(e) — but Part-IS is not yet lex specialis. See the control-level equivalence table, GNSS/ILS/VOR scope analysis, and your compliance gap roadmap.
Only 18% of manufacturers meet their own RTO targets. Learn why SCADA cold restart takes days and how to build an Art. 21(2)(c) BCP that survives an NCA audit.
Malta’s Enforcement Committee now issues NIS2 fines directly. Understand the €10M/2% vs €7M/1.4% tiers, which iGaming operators hit the essential entity ceiling, and the two-stage appeals pathway under L.N. 89/2026.
NIS2 Art. 21(2)(b) imposes six specific incident handling obligations on energy operators. Here is how the 24h–72h–30d reporting chain works for grid operators, gas TSOs, and renewables—including the NCCS dual-filing layer most compliance teams miss.
Luxembourg’s NIS2 Law (5 May 2026) designates HCPN, ILR, and CSSF as competent authorities. Map your sector to the right NCA and register by 10 July 2026.
Three NIS2 authorities in Luxembourg — HCPN, ILR, CSSF — hold distinct fine powers up to €10M. What DORA lex specialis means for banks’ Article 34 exposure.
Malta’s NIS2 framework splits oversight across CIPD, MCA, and CSIRT-Malta at MITA. Discover who regulates your sector, how to register, and what iGaming operators must do.
