The gist: Companies must register with the competent authorities by 31 July to comply with NIS2 requirements.
By 31 July 2024, companies falling under the NIS2 Directive must register. This deadline marks a binding transition period for operators of critical infrastructure and other affected organisations.
The NIS2 Directive (Network and Information Security Directive) obliges organisations in the EU to raise their network and information security to an enhanced level of protection. With the deadline of 31 July, a transition period ends during which affected companies must register with their competent national authorities.
Affected are operators of critical infrastructure (so-called critical entities) as well as larger companies in sectors such as energy, water, transport, health and financial services. Furthermore, providers of digital services and digital infrastructure services also fall under the regulations. Companies must demonstrate that they have established an information security management system and manage their risks appropriately.
CISOs should ensure that their organisations meet the registration deadline and that all required documentation is complete. Failure to comply can lead to supervisory measures and increase reputational risk.
Source: news.google.com · Published 7 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.