NIS2: New Incident Reporting Requirements Effective June 3011. June 2026Cybersecurity, NIS2NIS2 becomes binding from June 30; security incidents must be reported to authorities within 72 hours. Share on:
NIS2 and DORA Tighten Compliance Requirements with 24-Hour Reporting Obligation6. June 2026Cybersecurity, NIS2, RegulationNIS2 and DORA mandate organizations to report security incidents within 24 hours, requiring substantial adjustments to compliance processes. Share on:
NIS2 Directive: 29,500 Companies Subject to Reporting Obligations5. June 2026Cybersecurity, NIS2, RegulationApproximately 29,500 EU companies must centrally report cyber incidents under NIS2 and must align their reporting processes accordingly. Share on:
NIS2 Law: 24-Hour Reporting Obligation and Fines Up to €10 Million5. June 2026Cybersecurity, NIS2, RegulationThe NIS2 law mandates reporting of cybersecurity incidents within 24 hours and imposes high fines for non-compliance. Share on:
NIS2: Only 39 Percent of Affected Companies Have Registered5. June 2026Cybersecurity, NIS2, RegulationOnly approximately 40 percent of an estimated 29,500 companies subject to NIS2 obligations have registered so far, indicating systematic compliance gaps. Share on:
NIS2 Implementation: Registration Gap in Critical Infrastructures5. June 2026Cybersecurity, NIS2, RegulationFewer than 40 percent of NIS2-relevant companies have registered with authorities, despite the registration obligation being in effect. Share on:
Low NIS2 Registration Rates: Companies Barely Registering with the BSI5. June 2026Cybersecurity, NIS2Companies are registering with the BSI at insufficient rates despite the requirements of the NIS2 Directive. Share on: