NIS2 Directive: Scope, Readiness and Related Frameworks
NIS2 is the EU directive that sets cybersecurity risk-management and incident-reporting duties for essential and important entities in listed sectors. Whether it applies depends on your sector, size and role, and national transposition rules can differ between member states.
The guides below explain scope, a practical readiness checklist, and how NIS2 relates to ISO 27001 and DORA. They also cover the security reviews and advisory work that can help a team see where its current controls stand.
This page is general information, not legal advice. Confirm your obligations with qualified counsel or your national competent authority.
Related Articles
Buying Guides
Who Does NIS2 Apply To? Sectors, Size and Entity Types
Buying Guides
NIS2 Readiness Checklist: Practical Steps for Businesses
Buying Guides
ISO 27001 vs NIS2: How They Overlap and Where They Differ
Buying Guides
DORA Regulation for Fintechs: ICT and Third-Party Risk
Security Services
What Is a Security Baseline Review?
Security Services
Secure SDLC Review Guide
Security Services
Monthly Security Advisory Explained
Buying Guides
After a Suspected Security Issue: Preparing a Scoped Review