Automotive manufacturers and suppliers must overhaul their cybersecurity governance for NIS2 Directive compliance, yet industry-specific solutions and transition deadlines lack transparent communication.