We previously released some guidance around the new Network and Information Security Directive (NIS2), which you can read here. NIS2 has many different areas to dive into, so we thought we'd make this guide to keep you up to date with the new directive ahead of the changes.
Introduction To make the EU digitally safer, the EU published a new version of the Network and Information Security directive ( NIS2 ) at the end of 2022. After the translation of NIS2 into national legislation by the Member States, is expected to become effective at the end of 2024.
NIS2 will be applicable to more sectors and entities than the current directive, with more explicitly described security measures and fines, stricter incident reporting obligations, and will empower national supervisory authorities.
What are the timelines? NIS2 was approved and published by the EU at the end of 2022 and the implementation period of 21 months began in January 2023, during which the directive must be incorporated into national legislation. National laws are expected to enter into force at the end of 2024. From then, organisations must fulfill their duty of care and reporting.
Which organisations are in scope? Entities in the sectors mentioned in the table below are in scope. NIS2 makes a clear distinction between essential sectors and important sectors .
Essential entities will be actively monitored by supervisory authorities, whereas passive supervision will be carried out on the important entities.
Essential sectors: Energy, Transport, Banks, Financial market infrastructure, Health, Drinking water, Waste water, Digital Infrastructure, ICT Service Management, Public Administration, Space
Important sectors: Postal and courier services, Waste management, Chemicals, Food, Manufacturing, Digital services, Research
NIS2 does not apply to entities employing fewer than 50 persons and whose annual turnover (or annual balance sheet total) does not exceed 10 million. Exceptions to this size criteria are, for example, providers of trust services and public electronic communication services.
Will there be central registers maintained with organizations in scope? By April 2025, Member States shall establish a list of essential and important entities, and entities providing domain name registration services. For the purpose of establishing the list, Member States shall require the entities to submit at least the following information to the competent authorities:
(a) the name of the entity;
(b) the address and up-to-date contact details, including email addresses, IP ranges and telephone numbers.
The entities shall notify any changes within two weeks of the date of the change.
ENISA, the European Union Agency for Cybersecurity, will be responsible for the creation and maintenance of a registry for entities providing cross-border services e.g, DNS service providers, TLD name registries, entities providing domain name registration services, cloud computing service providers, and data centre service providers. Entities in scope are obliged to provide the required information before 18th January 2025.
Is governance and liability addressed? Management bodies of essential and important entities must approve the cybersecurity risk-management measures taken by those entities and oversee its implementation and can be held liable for infringements.
What does the duty of care mean for organisations? Organisations must take appropriate measures for the security of network and information systems, including the physical environment. Appropriate means that they are tailored to the risks. The directive states that, among other things, there must be:
Information systems risk analysis and security policy
Incident Handling
Business continuity, such as backup management, contingency, and crisis management
Security of the supply chain and life cycle of network and information systems, including response to and disclosure of vulnerabilities
Policies and procedures for assessing the effectiveness of security measures
Basic cyber hygiene practices and cyber security training
The directive refers to European and international standards for the design of security measures and specifically mentions the ISO 27000 series. Guidelines for cyber security and hygiene are also available on websites of (semi) governmental websites e.g., the Centre for Cyber Security Belgium, the National Cyber Security Centre and the Rijksinspectie Digitale Infrastructuur (both in the Netherlands).
What does the duty to report mean for organisations? The entities in scope of NIS2 must issue a preliminary alert for any significant incident (without delay) or any event, within 24 hours, and submit an incident report to the Computer Security Incidents Response Team (CSIRT) or competent authority within 72 hours at the latest.
Furthermore, entities will have the obligation to report changes related to the lists, with entities maintained by the European Union Agency for Cybersecurity (ENISA), and Member States.
What is the supervisory regime? Member States will monitor compliance with NIS2-based legislation. The essential entities will be actively supervised. Important entities will be passively supervised, meaning supervising authorities will take action if there is reason to do so, e.g., in the event of an incident.
Supervising authorities will have the power to subject entities, at least, to on-site inspections, off-site supervision, regular and ad hoc audits, security scans, and requests for documentation and information.
What are the possible fines? Administrative fines can be imposed on essential entities up to a maximum amount of at least 10 million, or up to at least 2% of global annual turnover.
Administrative fines can be imposed on significant entities up to a maximum amount of at least 7 mill
Most recent headlines
11/12/2025
Dalet, a leading provider of cloud-native, end-to-end media workflow solutions, ...
06/12/2025
In a live broadcast from the Reagan National Defense Forum, L3Harris Chair and CEO Christopher Kubasik joined Morgan Brennan on CNBCs Closing Bell: Overtime. Ku...
06/12/2025
FORT LAUDERDALE, Fla. A new survey from Pixitmedia by Datacore revealed a major shift in the Media & Entertainment industry in media archiving, with 85% of resp...
06/12/2025
HACKENSACK, N.J. LiveU has announced that the national public broadcaster Czech Television has completed one of the largest LiveU live production deployments fo...
06/12/2025
NEW YORK The National Academy of Television Arts and Sciences (NATAS) presented the Excellence in Production Technology Emmy Award to NASA+ and Dr. Tom Leight...
05/12/2025
2025 Sports Broadcasting Hall of Fame: Curt Gowdy Jr. - Master Storyteller, Nati...
05/12/2025
SVG Sit-Down: Veritone's Sean King on the Power of Mining Video, Audio DataThe company's Data Refinery offers users total control and governance over da...
05/12/2025
Platinum White Paper: Inside the Nashville Predators' Unified, Flexible, Sca...
05/12/2025
Netflix Reaches Agreement To Acquire Warner Bros. Following Planned WBD SplitThe deal does not include WBDs sports assets like TNT Sports (US, UK, LatAm), Euros...
05/12/2025
FOX Sports Returns to Indianapolis for Primetime Broadcast of Big Ten Championsh...
05/12/2025
SVG Summit 2025 Preview: Digital Engagement & Monetization Workshop Tackles the ...
05/12/2025
Atlanta United Lights Up New Emory Healthcare Studio With First Live Broadcast f...
05/12/2025
As Messi Takes the Pitch, MLS, Apple, NEP Roll Out Largest MLS Cup Production Ev...
05/12/2025
ESPN Enters College Football's Most Intense Month With Elevated Workflows fo...
05/12/2025
It's about that time! Awards season is in full swing, and the Film Independe...
05/12/2025
Every year, Spotify Wrapped offers a personalized look back at the audio that defined your year. It's a snapshot of your listening habits, designed to tell ...
05/12/2025
In 2025, Spotify's EQUAL, GLOW, and RADAR programs celebrated women, LGBTQIA , and emerging artists who turned moments into milestones. From breaking record...
05/12/2025
In our latest blog, we explain how Wi-Fi 7 rollouts can drive consumer loyalty with value-add services such as consumer cybersecurity. We also explore how this ...
05/12/2025
LOS ANGELES Netflix announced it has entered into an agreement to acquire the assets of Warner Bros. for $82.7 billion....
05/12/2025
NEW YORK Nielsens Gracenote has launched Gracenote Content Connect, a new ad platform that provides agencies, brands, supply-side platforms (SSPs) and demand-si...
05/12/2025
NEW YORK In an most important update to the workings of deal-based programmatic advertising, IAB Tech Lab has released version 1.0 of its Deals API for public c...
05/12/2025
NEW YORK Pass the turkey. Pass the stuffing. Pass the cranberry sauce. All are common requests of Americans celebrating Thanksgiving Day with family and f...
05/12/2025
NEW YORK Iris, the new cloud-connected camera control platform, has officially launched with features that turn virtually any PTZ camera into a software-connect...
05/12/2025
HOLLYWOOD, Calif. Netflix announced today that it has entered into an agreement to acquire the assets of Warner Bros. for $82.7 billion....
05/12/2025
NEW YORK Iris, the new cloud-connected camera control platform, has officially launched with features that turn virtually any PTZ camera into a software-connect...
05/12/2025
WASHINGTON The Federal Communications Commission has approved AT&T's $1.02 billion acquisition of spectrum from UScellular in a decision that was issued sho...
05/12/2025
The Best Coldplay Songs: 21 Tracks That Shoot for the Stars From Yellow to Viva La Vida, Fix You to Paradise, this playlist goes back to the start.
December ...
05/12/2025
Zafris Lecture Series Brings Nabil Ayers to Berklee The 32nd annual James G. Zafris Distinguished Lecture series was held on Thursday, November 13, with guest...
05/12/2025
Back to All News
Netflix Unveils the First Look for Land of Sin' - Premier...
05/12/2025
Introducing New Perks to Help You Get Even More from LinkedIn Premium Published on Dec 5, 2025 Categories: Company News, Product News
LinkedIn Corporate Co...
05/12/2025
Friday 5 December 2025
A new Game of Thrones Tale: Official trailer for Sky Exc...
05/12/2025
Back to All News
Don Lee, Lee Jin-uk, and Lalisa Manobal to Star in Netflix Act...
05/12/2025
Tis the season of giving once again and this year we've taken our Give Back Fridays' concept and turned it on its head.
In the autumn we were approach...
05/12/2025
Brayden Gogis doesn't remember a time when he wasn't completely fixated on games in all forms. In preschool, when they asked us to dress up as what we ...
05/12/2025
The Grinch steals the spotlight as the theme for The Late Late Toy Show 2025
Tune in tonight at 9:35pm on RT One and worldwide on RT Player
#LateLateToyShow...
05/12/2025
RT Announces New Presenters of Flagship News Programmes
New RT Six One News co-presenter Tommy Meskill
Sarah McInerney & Justin McCarthy join Morning Ir...
04/12/2025
ToolsOnAir Blackmagic Design HyperDeck Event Presets for just:in mac pro 2025 & ...
04/12/2025
ToolsOnAir AJA Ki Pro Event Presets for just:in mac pro 2025 & just:in linux
More Details:Starting with version 5.5, both just:in mac pro and just:in linux sol...
04/12/2025
Wangu Kanuri from Kenya and Godwin Asediba from Ghana are two of this years finalists for Thomsons Young Journalist of the Year Award. The pair are runners-up i...
04/12/2025
SVG Sit-Down: ProximaVision's Claudio Lisman on Why Tethered Drones Could Be...
04/12/2025
SVG Campus Shot Callers: Imry Halevi, Senior Associate Director of Athletics, Co...
04/12/2025
Platinum White Paper: LiveU Lightweight Sports Production: A Step Change in Spor...
04/12/2025
London to Riyadh: DAZN brings the boxing glamour to new production levels for Be...
04/12/2025
Analysis: Paramount bets on the battering ram' with Champions League play By Callum McCarthy, Editor-at-Large
Tuesday, December 2, 2025 - 10:12
Print ...
04/12/2025
Space City Home Network Launches SCHN DTC App for Astros and RocketsThe Rockets and Astros were previously the lone NBA and MLB teams without a DTC appBy Jason...
04/12/2025
SVG Summit 2025 Preview: Content Workflows Workshop Spotlights Evolution of Spor...
04/12/2025
New Sponsor Spotlight: Geotech's Patrick Wambold On the Unreal Engine Revolu...
04/12/2025
Curt Gowdy Jr. - Master Storyteller, Nationally and RegionallyBy Jason Dachman, Editorial Director, U.S.
Thursday, December 4, 2025 - 1:52 pm
Print This Sto...
04/12/2025
(L-R) Rebecca Lichtenfeld, Mohammadreza Eyni, Sara Khaki, and Judith Helfand att...
We previously released some guidance around the new Network and Information Security Directive (NIS2), which you can read here. NIS2 has many different areas to dive into, so we thought we'd make this guide to keep you up to date with the new directive ahead of the changes. 
