With national transposition completed, the NIS2 Directive is now being actively enforced across Member States. Supervisory authorities have begun inspections, audits, and enforcement actions against essential and important entities.
NIS2 expands scope to include sectors such as cloud services, digital providers, healthcare, manufacturing, and public administration, imposing strict incident reporting timelines and governance obligations.
The directive strengthens executive accountability, making senior management personally responsible for cybersecurity failures.
Official source:
European Commission – NIS2 Directive
https://digital-strategy.ec.europa.eu/en/policies/nis2-directive