Just 30% of EU member states have nationally implemented The Network and Information Security Directive (NIS2). While this is not unusual given that attention is divided among NIS2, the Digital Operations Resilience Act (DORA), and the European Cyber Resilience Act (CRA), target deadlines are being missed. This puts businesses on the back foot and risks falling even further behind the adoption curve.
NIS2 is the biggest cybersecurity legislation in over a decade, setting the stage for secure digital infrastructure across the EU. The directive's deadline has passed, as of 17 October 2024, but like many other EU regulations, NIS2 is taking a phased approach across Europe — much like when GDPR was introduced in 2016.
