The European NIS2 directive, which came into force on January 16, 2023, must be transposed by each EU member state by October 2024 at the latest.
This new directive responds to the rapid evolution of cyber threats in a constantly changing digital landscape. It expands the scope of the 2016 NIS Directive, including third-party risk management, reporting obligations, and the introduction of stringent enforcement requirements, while also addressing a broader range of industries.
It requires many organizations to establish a comprehensive risk management framework to enhance overall cybersecurity resilience within the EU.

The heads of the affected organizations will need to put in place mechanisms to:

• Acquire sufficient knowledge and skills to identify risks,
• Evaluate cybersecurity risk management practices,
• Assess the impacts on the services provided by their organization.