In a nutshell: Microsegmentation is no longer an optional security measure but a necessary control for NIS2 compliance.
The implementation of the NIS2 Directive forces organizations to implement microsegmentation. Without network segmentation, the requirements of the European cybersecurity regulation cannot be met.
The NIS2 Directive, which applies EU-wide from October 2024, mandates comprehensive cybersecurity measures for operators of critical infrastructure and companies in certain sectors. Among technical and organizational requirements, microsegmentation is increasingly being treated as a necessary component of network security.
Microsegmentation enables networks to be divided into smaller, isolated areas and allows granular control of data traffic between these segments. This limits the lateral movement freedom of attackers in case of a compromise and significantly reduces the attack surface.
For CISOs, this means: traditional firewall perimeter security is insufficient for NIS2 compliance. Organizations must redesign their network architecture to implement Zero Trust principles and control access based on identity, device state, and risk assessment. Implementation requires investments in tools, processes, and IT personnel.
Source: news.google.com · Published 25 June 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.1.