Germany’s NIS2 Competent Authority (BSI): Three Supervision Tiers That Determine Your Audit Risk
BSI audits some German NIS2 entities proactively — others only after non-compliance. Learn which of three supervision tiers determines your audit risk.
NIS2 compliance guides and resources
BSI audits some German NIS2 entities proactively — others only after non-compliance. Learn which of three supervision tiers determines your audit risk.
Which authority supervises your NIS2 compliance in Finland? Complete sector routing: Traficom, Energivirasto, Fimea, Fiva — and what each expects from you.
11 Danish NIS2 authorities mapped by sector. Find your supervisory body, understand the criminal prosecution model, and route incidents to CFCS correctly.
NIS2 fines in Denmark go through criminal courts, not admin decisions. Up to €10M or 2% for essential entities. Board liability only at gross negligence. CFCS, Energistyrelsen, Finanstilsynet mapped.
Kyberturvallisuuslaki in force since April 2025: 5,500 Finnish organisations face Traficom’s NIS2 framework and €10M penalties.
~6,000 Danish organisations now in NIS2 scope. How Virk.dk single-entry registration works, what CFCS enforces, and the 10 Article 21 measures Cybersikkerhedsloven requires.
The CBW passed the Dutch House on 15 April 2026 but is not yet in force. Map the three-tier fine structure, 6 sector supervisors, DORA carve-out, and the enforcement gap before the royal decree lands.
Belgium’s NIS2 fines reach €10M or 2% of revenue for essential entities. The CCB enforces through 8 escalating measures, up to court-ordered suspension of management functions.
CCB combines CERT.be, CyTRIS, NCCA, and NCC-BE — here’s which unit handles your NIS2 obligations and what to do before Belgium’s April 2026 deadline.
CBW enters force Q2 2026: three legal obligations for Dutch organisations. Register on mijn.ncsc.nl, meet reporting timelines, and find which of five sector regulators supervises your organisation.