On point: CISOs must operationally implement NIS2 requirements in their critical infrastructure by 31 July 2024.
Operators of critical infrastructure must implement the requirements of the NIS2 Directive by 31 July 2024. This deadline marks a binding obligation for comprehensive measures to enhance cybersecurity in industry and energy sectors.
The NIS2 Directive (Network and Information Security Directive 2) requires operators of critical infrastructure in the EU to demonstrably increase their cybersecurity standards. Affected sectors include energy, transport, water, health, digital infrastructure and finance. With 31 July 2024, the implementation deadline ends, after which national compliance controls will be conducted.
For CISOs, this concretely means the implementation of technical and organisational measures: risk management processes, incident response plans, supply chain security, minimum standards for cryptography and regular security testing. Organisations must also document evidence of their compliance and be able to lodge it with authorities.
Non-compliance can result in substantial fines. Organisations that have not yet completed the implementation process should immediately begin a gap analysis and address the most critical systems as a priority.
Source: news.google.com · Published 1 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.2.