(TR24) (FIC) Is Europe ready for NIS2?

Adopted in November 2022, the second the NIS Directive (NIS2) extends the scope of its predecessor to nearly 10 times as many organisations, including essential service operators and digital service suppliers. NIS2 tightens the cybersecurity requirements laid out by NIS1 and expands powers of control and sanction. In doing so, it places new obligations on the companies concerned, who must bear the costs of compliance, mobilise the necessary financial, human and material resources, and implement the required organisational and technical measures. NIS2 also represents an additional cost for the organisations and public authorities in charge of monitoring and enforcing it. Are Member States and the companies concerned capable of taking on new constraints? How can they be supported? How can a homogeneous adaptation throughout the EU be ensured? What can governments do to ensure that the cost of compliance is not a deterrent for some businesses?