NIS2 compliance guides and resources
NIS2 Annex II Section 2 covers waste operators with 50+ staff or €10M revenue — Article 21 obligations, SCADA risks, and dual incident reporting explained.
Is your country’s NIS2 law in force? All 27 EU member states tracked: competent authorities, registration deadlines, and EC infringement proceedings. Q2 2026.
Malta’s NIS2 framework — S.L. 460.41 — came fully into force on 23 January 2026. Learn who regulates compliance, how iGaming and maritime operators are classified, and the six steps to audit readiness.
Luxembourg’s Law of 5 May 2026 expanded NIS2 coverage from ~1,000 to ~8,000 entities. Learn which authority regulates you, how CIRCL and GOVCERT.LU differ, and what DORA means for financial compliance.
Cyprus holds €66 billion in banking assets and the EU’s 3rd-largest ship registry. Here’s what Law 60(I)/2025 requires from essential entities in each sector.
Slovenia’s NIS2 law ZInfV-1: 6,000+ organisations in scope, criminal sanctions to 15 years, December 2025 deadline. URSIV, SI-CERT, and Krško explained.
Croatia’s NIS2 Cybersecurity Act expanded scope to 10,000 organisations — understand your entity status, ZSIS obligations, and the 12-month compliance deadline.
Latvia adds a mandatory cybersecurity manager role NIS2 never required. Find out what CERT.LV expects, who must register, and the penalties now in force.
Bulgaria’s NIS2 transposition is live from 17 February 2026. Learn who is in scope, which authority enforces what, and get a practical compliance checklist under the amended Cybersecurity Act.
Slovak Cybersecurity Act No. 366/2024 is in force. Register with NBU, meet 12-month security deadlines, and report incidents to SK-CERT within 24 hours.
