The EU Agency for Cybersecurity (ENISA) has released official guidance to support organizations in meeting NIS2 Directive cybersecurity risk management requirements.
The guidance details expectations around governance, incident response, supply-chain security, and executive accountability. ENISA emphasizes documentation, regular audits, and alignment with ISO/IEC standards.
Organizations handling personal data are reminded that cybersecurity failures often lead directly to GDPR violations, reinforcing the need for integrated privacy and security governance.
Official Source:
ENISA – NIS2 implementation guidance
https://www.enisa.europa.eu