Topic

NIS2
articles.

13 articles from the ROOTKey blog on NIS2, newest first.

Scroll to read

Compliance

Operating Across a Half-Transposed NIS2 Map

Twenty-three member states have transposed. Several have not, and seven have been referred to the Court of Justice. Multinational entities are compliance-planning against a moving target.

23 September 20267 min read
DORA

DORA and NIS2 Overlap: Building One Evidence Layer for Dual-Regulated Financial Entities

DORA takes precedence over NIS2 for financial entities, but mixed groups and ICT providers still answer to both. How to collect evidence once and report it twice.

15 September 20266 min read
Compliance

You Registered. Now What? Portugal's NIS2 Obligations After the Deadline

Registration closes today. The incident reporting clock, the management accountability provisions, and the supervisory relationship all start tomorrow.

15 September 20267 min read
Compliance

The EU Network Code on Cybersecurity: The Energy Rulebook Sitting on Top of NIS2

Electricity operators are subject to a second, sector-specific cybersecurity regime that most NIS2 readiness programmes ignore entirely.

3 September 20268 min read
Compliance

Portugal's NIS2 Registration Deadline Is Days Away: What to Submit on MyCiber and What to Keep

The 60-working-day registration window opened by CNCS closes in mid-September. Registering is the easy part - the evidence you keep afterwards is what an audit will actually test.

1 September 20267 min read
Compliance

Portugal's NIS2 Supervisor Opens Its First Audits: What CNCS Is Actually Checking

Decreto-Lei 125/2025 gave Portugal its NIS2 framework. The audits now beginning are where it gets tested against real organizations.

26 August 20266 min read
Compliance

Inside Germany's NIS2 Enforcement Wave: What the BSI's Formal Orders Reveal

Dozens of formal supervisory orders are already active in Germany. Here is what they suggest about how NIS2 will actually be enforced across the EU.

18 August 20266 min read
Compliance

NIS2 Enforcement Tracker: The First Fines Are In, and Four Member States Are Headed to Court

Belgium, Italy, Hungary, and Lithuania have issued confirmed penalties. Ireland, Spain, France, and the Netherlands now face the Court of Justice of the EU.

6 August 20266 min read
Compliance

Healthcare Cybersecurity in 2026: NIS2, GDPR, and the Data Integrity Gap

Healthcare is the most targeted sector for cyberattacks in Europe. NIS2 makes it an essential entity sector. Here is what that means.

22 July 20267 min read
Compliance

How to Use the ROOTKey NIS2 Simulator: A Compliance Team's Guide

Step-by-step: how the ROOTKey NIS2 Simulator maps your obligations, scores your compliance posture, and generates the audit-ready evidence your regulators will ask for.

21 July 20265 min read
Compliance

ISO 27001 vs NIS2: What Compliance Teams Need to Know in 2026

ISO 27001 certification does not mean NIS2 compliance. Here is where they overlap, where they diverge, and what you still need to do.

20 July 20267 min read
Compliance

NIS2 in Portugal: What Decreto-Lei 125/2025 Means for Portuguese Organisations

Portugal transposed NIS2 into national law in late 2025. Here is what changed, what deadlines apply, and what compliance requires.

11 July 20267 min read
Compliance

NIS2 First Audit Deadline: What European Organizations Must Do Next

The June 30 deadline has passed - here is how to move from reactive compliance to continuous, machine-verifiable evidence.

23 June 20266 min read

Stay in the loop

Cyber-resilience
insights.

Get cyber-resilience insights in your inbox. Practical, audit-ready guidance on data integrity, compliance and continuity, delivered as we publish.