NIS2 Directive Enhances EU Cybersecurity Framework
Article Content
- •NIS2 Directive strengthens EU cybersecurity requirements.
- •Organizations must embed cybersecurity governance at the executive level.
- •Essential entities need certification by April 2027.
The NIS2 Directive, adopted in December 2022 and implemented in Belgium by April 2024, aims to bolster cybersecurity across essential and important entities in the EU. It introduces stricter requirements for governance, risk management, incident response, and supply chain security. Organizations must now embed cybersecurity at the board level, ensuring accountability and adequate resource allocation. The directive emphasizes proactive risk management and requires compliance with frameworks like Cyber Fundamentals (CyFun) and ISO 27001. Essential entities must achieve certification by April 2027. KPMG offers support for organizations navigating these changes, including maturity assessments and policy updates. The directive marks a significant shift from reactive to proactive cybersecurity governance.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What is the NIS2 Directive?
Who must comply with NIS2?
What support does KPMG offer for NIS2 compliance?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…