Implement state-of-the-art security for NIS2 compliance

NIS2, short for Network and Information Systems Directive 2, is an EU directive aimed at enhancing the security and resilience of network and information systems across critical infrastructure. NIS2 significantly broadens the scope of sectors and types of entities covered, requiring organizations to implement appropriate technical and organizational measures to manage cybersecurity risks. This includes employing effective encryption practices to prevent and minimize the impact of potential incidents. Member states have until October 2024 to transpose NIS2 into national law, as the directive came into effect in January 2023.

NIS2 applies to large enterprises in 11 essential sectors, including energy, transport, healthcare, finance, and aerospace, covering a broad segment of the economy. It distinguishes between "important" and "essential" entities: "important" entities face lower fines and reactive supervision, while "essential" entities are subject to proactive supervision.