The 24-Hour Rule: Common Mistakes on a First NIS2 Incident Report
NIS2Incident Reporting
The 24-hour early warning is deliberately low-bar, but many teams still get it wrong the first time. Here are the mistakes to avoid.
News
News & Updates
Short, practical notes on what changes in EU cyber and compliance regulation — and what it means for the documents you keep on file.
Article 20 in Practice: What Board-Level NIS2 Training Should Cover
NIS2Governance
NIS2 doesn't just ask your board to approve a policy once — it requires ongoing oversight and training. Here's what that actually looks like.
NIS2 National Transposition: Where EU Member States Stand
NIS2Transposition
NIS2 is a directive, not a regulation — so the exact rules depend on how your country transposed it. Here's what that means for your compliance timeline.