![\"\"](\"https:\/\/www.tpo.solutions\/wp-content\/uploads\/2026\/06\/Nis2-concerne-889x1024.png\")
<\/p>\nCyberattacks are multiplying and now affect all types of organisations. In response to this growing threat, the European Union introduced the NIS2 Directive, particularly for critical sectors, in order to raise the overall level of cybersecurity and improve companies\u2019 resilience against cyber risks.<\/p>\n
The NIS2 Directive significantly broadens its scope compared with the previous version. It no longer targets only critical infrastructures, but now applies to a large number of companies and organisations.<\/p>\n
Highly critical sectors, considered essential to the functioning of society, include in particular:<\/p>\n
\u2022 Energy
\n\u2022 Transport
\n\u2022 Banking and financial market infrastructures
\n\u2022 Healthcare
\n\u2022 Drinking water and wastewater
\n\u2022 Digital infrastructure, such as cloud services, data centres, DNS, etc.
\n\u2022 ICT service management
\n\u2022 Public administrations
\n\u2022 Space sector<\/p>\n
Beyond the sector of activity, the size of the organisation is the second eligibility criterion under the NIS2 Directive. A company is generally concerned if it meets at least one of the following criteria:<\/p>\n
\u2022 At least 50 employees
\n\u2022 An annual turnover exceeding \u20ac10 million
\n\u2022 A balance sheet total exceeding \u20ac10 million<\/p>\n
This means that, in practice, many companies that did not previously consider themselves to be critical actors are now concerned by NIS2.<\/p>\n
<\/p>\n
For the organisations concerned, the NIS2 Directive is not limited to their identification. It also requires the implementation of concrete cybersecurity measures.<\/p>\n
Article 21 notably provides for the establishment of structured cyber risk management.<\/p>\n
The main obligations include:<\/p>\n
\u2022 Incident management, with capabilities for detection, response and rapid notification
\n\u2022 Business continuity, through disaster recovery and business continuity plans
\n\u2022 Supply chain security, including the monitoring of suppliers and service providers
\n\u2022 Vulnerability management, with the identification and correction of weaknesses
\n\u2022 Protection of systems and networks, through appropriate technical measures
\n\u2022 Awareness-raising and training of teams regarding cyber risks<\/p>\n
These requirements show that cybersecurity can no longer be approached solely as a technical matter.<\/p>\n
It is becoming a strategic issue involving several functions within the organisation, including IT, legal, risk management and senior management.<\/p>\n
![\"\"](\"https:\/\/www.tpo.solutions\/wp-content\/uploads\/2026\/06\/Gestion-risques-cyber-977x1024.png\")
<\/p>\n
With compliance deadlines varying depending on the situation, calculated over 18 or 30 months from the entry into force of the NIS2 framework or from identification by the CCB, NIS2 is much more than a regulatory obligation: it is an opportunity to structure your cybersecurity in a sustainable way.<\/p>\n
Our multidisciplinary team supports you in understanding your obligations, structuring your cyber governance and implementing a concrete and effective approach to NIS2 compliance.<\/p>\n
Would you like to go further?<\/p>\n
\ud83d\udc49 Contact us: Cyberattacks are multiplying and now affect all types of organisations. In response to this growing threat, the European Union introduced the NIS2 Directive, particularly for critical sectors, in order to raise the overall level of cybersecurity and improve companies\u2019 resilience against cyber risks. Which organisations are concerned by NIS2? The NIS2 Directive significantly broadens its […]<\/p>\n","protected":false},"author":6,"featured_media":5265,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[72],"tags":[],"class_list":["post-5278","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-en"],"acf":[],"yoast_head":"\n
\nSabine Mersch
\ninfo@tpo.solutions<\/a>
\n+32 87 71 02 00
\nwww.tpo.solutions<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"