Guide

Hungary’s NIS2 audit deadline is June 30, 2026. Understand SZTFH registration, entity scope, and the management liability provision that other guides miss.

Lithuania’s NCSC-LT notified 1,443 entities in April 2025. Organisational controls due by 17 April 2026, technical measures by 17 April 2027 — here is the full compliance roadmap.

Greece enacted Law 5160/2024 — your organisation has until 30 September 2025 to register with NCSA and appoint a YASPE officer. Here’s what applies to you.

Sweden’s NIS2 law is in force. See which authority governs your sector, how to register by the deadline, and what Swedish law adds beyond the EU Directive.

Czech NIS2 is stricter than the EU directive in 3 key ways. How NUKIB’s Act 264/2025 expands scope, which incidents to report where, and how to register now.

Romania’s NIS2 law (GEO 155/2024) gives DNSC enforcement power, a 30-day registration window, and obligations with fines up to €10M for essential entities.

CNCS audits Portuguese NIS2 entities from late 2026. Learn registration deadlines, incident reporting windows, and how to protect director liability.

Austria transposed NIS2 via the NISG 2026 — in force 1 October 2026 with a 31 December registration deadline. Learn who supervises, who must comply, and what your organisation needs to do now.

NIS2 entities deploying Annex III AI face dual obligations from Aug 2026: Art. 21 for organisational security and AI Act Art. 26 for the AI system itself.

Already using NIST CSF 2.0? You’ve covered ~70% of NIS2 Article 21 — this mapping shows the three gaps that remain and what to build first.