NIS2

Incident reporting, supply-chain risk, and cybersecurity governance under NIS2.

NIS2 supplier contracts need eight security clauses. A DPA covers five at best.

NIS2 supplier contracts need eight security clauses. A DPA covers five at best.

NIS2's implementing regulation names eight things your supplier contracts have to specify. By my count a GDPR data proc…

20 Sep 2026

NIS2 gives you 24 hours to report a full cloud outage longer than 30 minutes

NIS2 gives you 24 hours to report a full cloud outage longer than 30 minutes

NIS2 gives you 24 hours from becoming aware of a significant incident to file a first report with your national cyber i…

13 Sep 2026

NIS2 is nearly two years late in four countries. It reached your sales cycle on time.

NIS2 is nearly two years late in four countries. It reached your sales cycle on time.

NIS2 had to be in national law by 17 October 2024, and in July 2026 four member states were referred to the EU Court fo…

3 Aug 2026