What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU?
Summary: NIS2 is a European directive requiring organizations operating in the EU to meet a high common level of network and infrastructure security, published on Dec. 27, 2022, with each member state given until Oct. 17, 2024 to transpose it into national law. It succeeds the NIS1 Directive from 2018, broadens scope to new sectors and organization types, and applies to entities with 50 or more employees and annual turnover or balance sheet total above EUR 10 million, plus exceptions under Articles 2 and 3.
What's compelling: Essential entities face administrative fines of at least EUR 10,000,000 or 2% of worldwide annual turnover, whichever is higher, while important entities face at least EUR 7,000,000 or 1.4% - and essential entities are proactively supervised by the government rather than checked only after an incident.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026