Bottom line: Approximately 33% of NIS2 reporting-obligated operators have not completed their registration, risking fines and operational security gaps.
According to a recent survey, one-third of affected operators have not yet completed mandatory registration under NIS2. This jeopardizes both the compliance objectives of the EU directive and the operational security of the companies themselves.
Implementation of the NIS2 Directive is proceeding unevenly: one-third of operators required to register have not yet submitted their notifications. This affects critical infrastructures as well as digital service providers that fall under the directive’s reporting obligation.
For CISOs, this backlog represents operational risk. Registration is not merely an administrative formality, but a prerequisite for full implementation of NIS2 security requirements and for cooperation with authorities in cyber incident management. Unregistered operators thus jeopardize their ability to respond rapidly to security incidents.
Failures to comply can result in substantial fines. National regulatory authorities have set deadlines for remediation. CISOs should verify whether their organization has all required documentation for registration and—if not already done—contact the competent authority immediately.
Source: news.google.com · Published 5 June 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 of the EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.6.3.