Documentation

NIS 2, written for people who have to do it.

The EU directive, the German BSIG, the CIR 2024/2690 and the practitioner moves. Primary sources only. No consultant prose.

Am I in scope?

Sector and size test against the EU directive.

What do I need to do?

The ten measures in Article 21 NIS 2, one at a time.

Something happened. Now what?

Incident reporting, BSI inquiries, fine procedures.

Featured

NIS 2 EU implementation tracker

Where each of the 27 Member States stands on NIS 2 transposition. National act, authority, CSIRT, status.

NIS 2 implementation across the EU

Overview of the 27 transposition processes. Why it slipped and what that means for entities.

NIS 2 in 5 minutes

For managing directors. The directive, the duties, the personal liability — no consultant prose.

NIS 2 vs NIS 1

What changed structurally: scope, obligations, governance, reporting, enforcement.

Browse by question

Eight questions, every operator asks.

Am I in scope at all?

23 pages

What does NIS 2 mean for my sector?

9 pages

What does it all actually mean?

16 pages

What do I actually need to do?

29 pages

Law and consequences

What happens if I don't comply?

9 pages

How does this fit with what I already have?

8 pages

Timelines and status

What are the deadlines?

13 pages

Troubleshooting

What to do when something goes wrong?

1 page