The NIS2 Directive covers approximately 30,000 additional companies that must align their cybersecurity governance and technical controls with EU-wide standards.
NIS2 requires enterprises to implement structured cybersecurity risk management and governance; identifying the scope of application is the first step.
The Cyber Resilience Act requires documented and timely update processes for IoT devices, forcing CISOs to implement systematic changes in software maintenance.