The NIS2 (Network and Information Systems 2) directive came into force in October 2024. It now covers more than 100,000 companies in Europe, versus 15,000 for NIS1. Penalties can reach 10 million euros or 2% of global turnover.
6-month compliance plan
Months 1-2: Gap analysis — assessment of the gap between current state and NIS2 requirements. Critical asset mapping and risk analysis (EBIOS RM methodology recommended). Months 3-4: Priority remediation — MFA implementation, access hardening, SIEM/SOC deployment, incident management procedures. Months 5-6: Documentation and governance — formalized security policies, continuity plans, team training, and regulatory reporting setup.
NIS2ComplianceCybersecurityRegulation
About the author
SL
Sophie LECLERC
Security Consultant, ACCENSEO
CISSP and CISM certified cybersecurity expert. Sophie works on security audits, NIS2 compliance, and Zero Trust architecture design for mid-market and large enterprises.
