NIS 2
Resiliently
NIS 2 · · 12 min read
Nis2 Austria Egov Compliance Guide 2026
Austrias journey to NIS2 compliance has been one of the most dramatic in the EU. The initial NISG 2024 was **rejected by Parliament in July 2024** over constitutional federal-stat
Resiliently
NIS 2 · · 12 min read
Nis2 Belgium Ccb Compliance Guide 2026
Belgium made history as the **first EU Member State to fully transpose the NIS2 Directive** into national law, passing the Law of 26 April 2024 well ahead of the 17 October 2024 EU
Resiliently
NIS 2 · · 14 min read
Nis2 Bulgaria Cybersecurity Act Compliance Guide 2026
Bulgaria transposed the EU NIS2 Directive into national law by **amending its existing Cybersecurity Act** (Закон за киберсигурността), with the amendments entering into force on *
Resiliently
NIS 2 · · 16 min read
Nis2 Croatia Cybersecurity Act Compliance Guide 2026
Croatia was one of the **first EU Member States** to transpose the NIS2 Directive into national law, passing the **Cybersecurity Act** (*Zakon o kibernetičkoj sigurnosti*, Official
Resiliently
NIS 2 · · 17 min read
Nis2 Cyprus Ocecpr Compliance Guide 2026
Cyprus transposition of NIS2 has been one of the most distinctive in the EU — not for its speed (it missed the October 2024 deadline by six months), but for its **strictest-in-clas
Resiliently
NIS 2 · · 9 min read
Nis2 Czech Republic Nukib Compliance Guide 2026
The Czech Republic went further than almost any EU member state in transposing NIS2. **Act No. 264/2025 Coll.** doesnt merely implement the directive — it creates an entirely new
Resiliently
NIS 2 · · 9 min read
Nis2 Denmark Cfcs Compliance Guide 2026
Denmark transposed the NIS2 Directive through the **NIS-2-loven** (Law on Measures to Ensure a High Level of Cybersecurity, Bill L 141) — but unlike most EU member states, Denmark
Resiliently
NIS 2 · · 10 min read
Nis2 Directive Compliance Guide 2026
The NIS2 Directive entered into force on October 17, 2024, fundamentally reshaping the cybersecurity landscape for organizations across the European Union. If your company operates
Resiliently
NIS 2 · · 14 min read
Nis2 Estonia Ria Compliance Guide 2026
Estonia has transposed the EU NIS2 Directive into national law by **amending its existing Cybersecurity Act (Küberturvalisuse seadus)**, which entered into force on **1 January 202
Resiliently
NIS 2 · · 10 min read
Nis2 Finland Traficom Compliance Guide 2026
Finland is among the earliest and most prepared NIS2 transposers in the EU. The **Kyberturvallisuuslaki** (Cybersecurity Act, Act 124/2025) entered into force on **8 April 2025** —
Resiliently
NIS 2 · · 12 min read
Nis2 France Anssi Compliance Guide 2026
Frances Agence Nationale de la Sécurité des Systèmes dInformation (ANSSI) has emerged as one of the most active national cybersecurity supervisors in the EUs NIS2 enforcement la
Resiliently
NIS 2 · · 14 min read
Nis2 Greece Ensi Compliance Guide 2026
Greece occupies a unique position in the EUs NIS2 compliance landscape. It controls the **worlds largest merchant fleet** by tonnage, operates critical energy infrastructure acro
Resiliently
NIS 2 · · 19 min read
Nis2 Hungary Nbi Nkh Compliance Guide 2026
Hungarys NIS2 transposition through **Act LXIX of 2024 on the Cybersecurity of Hungary** created much more than a single-regulator compliance regime. While **SZTFH (Supervisory Au
Resiliently
NIS 2 · · 16 min read
Nis2 Hungary Sztfh Nki Compliance Guide 2026
Hungary transposed the EU NIS2 Directive into national law through **Act LXIX of 2024 on the Cybersecurity of Hungary** (a.k.a. the Cybersecurity Act), which entered into force on
Resiliently
NIS 2 · · 13 min read
Nis2 Italy Acn Compliance Guide 2026
Italy has emerged as one of the EUs most aggressive NIS2 enforcers. The Agenzia per la Cybersicurezza Nazionale (ACN), established in 2021, has built a compliance architecture tha
Resiliently
NIS 2 · · 23 min read
Nis2 Latvia Ncsc Cert Cybersecurity Act Compliance Guide 2026
Latvia transposed the EU NIS2 Directive through a brand-new central statute — the **Nacionālās kiberdrošības likums** (National Cybersecurity Law) — adopted by the Saeima on 20 Jun
Resiliently
NIS 2 · · 19 min read
Nis2 Malta Mita Compliance Guide 2026
Malta was the last EU Member State to transpose the NIS2 Directive into national law, completing the process through the **NIS2 Implementing Regulations, 2025** under the Malta Dig
Resiliently
NIS 2 · · 11 min read
Nis2 Netherlands Ncsc Compliance Guide 2026
The Netherlands has long been a leader in cybersecurity policy within the EU. With the introduction of the **Uitvoeringswet cybersecurityrichtlijn** (Implementation Act for the Cyb
Resiliently
NIS 2 · · 13 min read
Nis2 Poland Ncsa Compliance Guide 2026
Poland is among the EU Member States actively transposing NIS2 into national law through amendments to its existing **Ustawa o krajowym systemie cyberbezpieczeństwa** (Act on the N
Resiliently
NIS 2 · · 9 min read
Nis2 Portugal Cncs Compliance Guide 2026
Portugal transposed NIS2 through **Decree-Law No. 125/2025** on 4 December 2025, creating the **Regime Jurídico da Cibersegurança** (Legal Framework for Cybersecurity). But Portuga
Resiliently
NIS 2 · · 12 min read
Nis2 Romania Ansi Compliance Guide 2026
Romania is among the EU Member States working to transpose NIS2 into national law through amendments to its existing **Legea nr. 361/2018 privind măsurile pentru asigurarea unui ni
Resiliently
NIS 2 · · 21 min read
Nis2 Slovakia Nbu Compliance Guide 2026
Slovakia transposed the EU NIS2 Directive through an **amendment to the Act on Cybersecurity** (*Zákon o kybernetickej bezpečnosti*), which was adopted in **2024** and entered into
Resiliently
NIS 2 · · 19 min read
Nis2 Slovenia Si Cert Compliance Guide 2026
Slovenia transposed the EU NIS2 Directive through the **Cybersecurity Act** (*Zakon o kibernetski varnosti*, **ZKV-1**), which was adopted in **late 2024** and entered into force o
Resiliently
NIS 2 · · 14 min read
Nis2 Spain Incibe Compliance Guide 2026
Spains Instituto Nacional de Ciberseguridad (INCIBE), working alongside the Centro Criptológico Nacional (CCN), has established one of the EUs most structured NIS2 enforcement fr
Resiliently
NIS 2 · · 12 min read
Nis2 Sweden Msb Compliance Guide 2026
Swedens **Cybersäkerhetslagen** (Cybersecurity Act, SFS 2025:1506) entered into force on **15 January 2026** — more than a year after the EUs October 2024 transposition deadline.
Resilience Stack · · 12 min read
The Resilience Stack™: A Five-Layer Framework for Cyber Insurance Risk Assessment
Introducing The Resilience Stack™ — Resiliently's proprietary framework that maps the full cyber risk journey from external threats to insurance readiness, with free assessment tools at every layer.
NIS 2 · · 14 min read
What Eclipse Ditto Security Gaps Mean for Your Cyber Policy
OpenHack whitebox review of Eclipse Ditto reveals digital twin authentication bypass, policy injection, and WebSocket exposure patterns that increase OT and manufacturing cyber insurance claims risk.
NIS 2 · · 15 min read
What HashiCorp Vault Security Gaps Mean for Your Cyber Policy
OpenHack whitebox review of HashiCorp Vault reveals seal bypass risks, token leakage patterns, and storage backend misconfigurations that undermine the foundation of secret management assurance for cyber insurance.
NIS 2 · · 14 min read
What Keycloak Security Gaps Mean for Your Cyber Policy
OpenHack whitebox review of Keycloak reveals authentication bypass, session fixation, and RBAC misconfiguration patterns that directly impact identity-related cyber insurance claims.
NIS 2 · · 14 min read
What OpenZeppelin Contracts Security Gaps Mean for Your Cyber Policy
OpenHack whitebox review of OpenZeppelin Contracts reveals reentrancy patterns, access control gaps, and gas griefing vectors that underwriters must factor into DeFi and smart contract risk pricing.
NIS 2 · · 14 min read
What Strimzi Security Gaps Mean for Your Cyber Policy
OpenHack whitebox review of Strimzi Kafka Operator reveals privilege escalation in K8s RBAC, unsafe deserialization, and certificate management gaps that impact OT and manufacturing cyber insurance.
Agentic AI · · 11 min read
The Five Toxic Powers of Agentic AI — What Underwriters Need to Know
Agentic AI introduces five double-edged powers that create toxic risk combinations. Here's how underwriters, brokers, and CISOs should assess the threat.
Resilience Stack · · 21 min read
The Resilience Stack™: A 5-Layer Framework for Cyber Insurance Risk Assessment
Introducing the Resilience Stack™ — RESILIENTLY's proprietary framework for evaluating cyber risk across five layers: threat landscape, exposure surface, regulatory posture, financial impact, and insurance readiness.
NIS 2 · · 4 min read
NIS2 Compliance Is Now an Underwriting Requirement — Every Broker's Duty of Care
The NIS2 transposition deadline has passed. With fewer than 10% of critical entities fully compliant, carriers are starting to exclude non-compliant organizations from coverage. For insurance brokers, failing to verify client NIS2 status is now a professional liability risk. Here's what you need to know.
NIS 2 · · 9 min read
The NIS2 + AI Coverage Gap: When Your Cyber Policy Won't Cover the Incident NIS2 Requires You to Report
NIS2 mandates AI incident reporting for hundreds of thousands of EU entities. But most cyber insurance policies contain silent AI exclusions, sublimits, or ambiguity that leave insureds paying for AI incident response out of pocket — even though NIS2 required them to report the incident in the first place.
Cyber Insurance · · 14 min read
Cyber Insurance Policy Wording: 12 Essential Clauses Every Underwriter and Broker Must Check in 2026
Practitioner guide to cyber insurance policy wording — the 12 critical clauses that determine coverage scope, exclusions, and claims outcomes. Written for underwriters, brokers, and risk managers comparing cyber policies in 2026.
Ransomware · · 7 min read
NIS2 Ransomware Reporting Requirements: What Incident Response Teams Must Know
Under NIS2, ransomware incidents trigger mandatory reporting obligations with tight deadlines and personal liability for management. Here is the compliance playbook incident response teams need.
Cyber Insurance · · 10 min read
Cyber Insurance Renewal Guide: How to Review, Renegotiate, and Switch Providers in 2026
Everything you need to know about renewing your cyber insurance policy in 2026. Learn when to start the renewal process, how to negotiate better premiums, what coverage changes to watch for, and when switching providers makes sense.
NIS 2 · · 12 min read
How to Prepare for a NIS2 Audit: Documentation, Evidence, and Compliance Verification Guide (2026)
Complete guide to NIS2 audit preparation. Covers documentation requirements by Article, evidence collection, common failures, management liability, and a 30-day pre-audit checklist for in-scope EU entities.
NIS 2 · · 10 min read
How NIS2 Compliance Lowers Cyber Insurance Premiums: The Business Case for Security Investment
NIS2 compliance can reduce cyber insurance premiums by 15-40%. Learn which controls insurers value most, how to document compliance for underwriters, and calculate the ROI of security investment against premium savings.
NIS 2 · · 12 min read
How to Conduct a NIS2 Gap Analysis: Step-by-Step Readiness Assessment for 2026
Complete NIS2 gap analysis methodology with step-by-step instructions, free checklist template, and readiness scoring framework. Identify compliance gaps across all 10 Article 21 measures, incident reporting, governance, and supply chain security before your national authority does.
NIS 2 · · 8 min read
NIS2 Ireland Preparation Guide: National Cyber Security Bill, NCSC Ireland and CyFun Framework for 2026
Complete guide to NIS2 preparation in Ireland. Covers the pending National Cyber Security Bill, NCSC Ireland authority, CyFun compliance framework adopted from Belgium, 15 Risk Management Measures, entity classification expectations, and what organizations should do now despite legislation not yet enacted.
NIS 2 · · 10 min read
NIS2 Supply Chain Security Requirements: Third-Party Risk Management Guide for 2026
NIS2 Article 21 mandates supply chain security for all essential and important entities. Complete guide to third-party risk assessments, vendor security clauses, supply chain vulnerability monitoring, and compliance evidence — with free checklist and implementation templates.
NIS 2 · · 13 min read
Critical Infrastructure Underwriting Under NIS2: Healthcare, Energy, and Transport in 2026
A sector-by-sector guide for cyber underwriters on NIS2 critical infrastructure compliance in healthcare, energy, and transport — including specific requirements, claim trends, underwriting questions, and coverage implications.
Cyber Resilience Act · · 12 min read
Cyber Resilience Act vs NIS2 vs DORA: Which Regulation Applies to My Insured?
A practical comparison of the three major EU cybersecurity regulations — CRA, NIS2, and DORA — explaining scope, timelines, requirements, and what cyber insurance underwriters need to ask clients in 2026.
NIS 2 · · 11 min read
NIS2 Article 21 Technical Measures: The Complete Security Requirements Breakdown for 2026
NIS2 Article 21 defines 10 mandatory security measures every essential and important entity must implement. Complete breakdown of each requirement with implementation guidance, audit evidence expectations, and compliance timeline.
NIS 2 · · 8 min read
NIS2 Board Liability: Personal Fines, Bans, and What Management Must Know in 2026
NIS2 Article 20 holds management bodies personally liable for cybersecurity failures. This guide explains personal fines, temporary bans, and the 7 steps boards must take to protect themselves in 2026.
DORA · · 23 min read
DORA ICT Risk Management Framework: What Cyber Insurance Underwriters Must Know in 2026
Complete practitioner guide to the DORA ICT risk management framework for cyber insurance underwriting. Covers the 5 pillars, how they affect coverage decisions, underwriting questions for financial sector clients, and compliance deadlines.
NIS 2 · · 9 min read
NIS2 Compliance Cost: What European Companies Actually Spend in 2026
Real NIS2 compliance costs broken down by company size and sector. Essential entities spend €150K-€2M+, important entities €30K-€500K. Includes cost framework, hidden expenses, ROI calculation, and free tools to estimate your budget.
NIS 2 · · 9 min read
NIS2 Compliance for IT Managers: The Action Plan That Actually Works in 2026
Step-by-step NIS2 compliance action plan for IT managers and CISOs. Practical implementation guide covering risk management, incident reporting, security governance, supply chain security, and business continuity — with free tools and templates.
Cyber Insurance · · 8 min read
Cyber Insurance for Small Businesses in Europe: The Complete 2026 Guide
Everything small and medium businesses in the EU need to know about cyber insurance in 2026. Learn what coverage you need, how much it costs, NIS2 requirements, and how to find the right policy for your budget.
NIS 2 · · 5 min read
BSI Opens NIS2 Enforcement: What German Entities Must Do Before the Audit
BSI has begun NIS2 enforcement audits. Essential entities in Germany face up to €10M fines. Here is what your audit readiness checklist looks like for 2026.
NIS 2 · · 4 min read
NIS2 Intelligence Digest — BSI Enforcement Activated, Penalty Calculators Updated
Weekly intelligence on NIS2 enforcement, supervisory activity, and cyber insurance market developments across the EU.
NIS 2 · · 6 min read
NIS2 Compliance Checklist for 2026: What Brokers Need to Verify Before Coverage Placement
Before placing cyber coverage for NIS2 in-scope clients, verify these 10 compliance checkpoints. Missing documentation is the most common coverage gap.
NIS 2 · · 9 min read
NIS2 Penalties Explained: Essential vs Important Entities and What They Mean for Coverage
NIS2 fines range from €7M to €10M depending on entity classification. Understand essential vs important entity penalties and how compliance posture affects cyber insurance pricing.
NIS 2 · · 16 min read
NIS2 Underwriting Questions: What Every Cyber Insurance Broker Should Ask
Practical Line 1, Line 2, and Line 3 underwriting questions for NIS2-exposed clients. Essential vs important entities. Coverage gaps brokers should flag.
Cyber Insurance Comparison · · 16 min read
Cyber Insurance Comparison: How to Evaluate and Compare Policies in 2026
Learn how to compare cyber insurance policies in 2026. Coverage limits, deductibles, exclusions, endorsements, top EU providers, and a buyer's checklist. Includes NIS2 impact on policy selection.
NIS 2 · · 8 min read
NIS2 Compliance Checklist 2026: Complete Guide for the 2026 Deadline
Complete NIS2 compliance checklist with 70+ action items covering risk management, incident reporting, supply chain security, and governance. Essential preparation for EU enforcement.
NIS 2 · · 17 min read
What is NIS2 Compliance? A Complete Guide for 2026
Master NIS2 compliance in 2026. Understand the EU cybersecurity directive, who it affects, key requirements, penalties, and how to prepare before enforcement.
NIS 2 · · 5 min read
NIS2 Penalties Explained: Essential vs Important Entities for 2026
Understand the critical difference between NIS2 essential and important entities. Classification criteria, compliance requirements, penalty differences, and what it means for your cyber insurance.
Agentic AI · · 9 min read
Agentic Security: What Underwriters Need to Know in 2026
Autonomous AI agents are entering production at scale — and they bring a completely new attack surface that traditional cyber insurance questionnaires weren't designed to capture.
Cyber Insurance · · 5 min read
How Much Does Cyber Insurance Cost in 2026? A Pricing Breakdown for Underwriters and Buyers
Complete guide to cyber insurance pricing in 2026. Learn the key factors that determine premiums, from revenue size to security controls, with real market benchmarks for SMEs and mid-market companies.
Cyber Insurance · · 7 min read
Cyber Insurance Buying Guide 2026: What Every Business Needs to Know
A practical guide to choosing the right cyber insurance policy in 2026. Covers NIS2 compliance, key coverage areas, common exclusions, and how to get the best terms.
NIS 2 · · 10 min read
The NIS2 Audit Crunch: What Underwriters Need to Know Before June 30, 2026
With the June 30, 2026 NIS2 compliance audit deadline approaching, cyber underwriters face a narrow window to reassess risk profiles across their entire European portfolio. Here is what the audit requirement means for how you evaluate, price, and write cyber coverage.