NIS2 widens scope across critical sectors and introduces management-body accountability, strict incident reporting and supply-chain requirements. Fines reach up to €10m or 2% of global turnover for essential entities and €7m or 1.4% for important entities.
Transposition across Member States has been uneven, but organisations cannot wait for local implementation to start their compliance journey. Many entities are in scope for the first time and need to build governance, risk management and reporting capabilities from a low base.
