Two years ago we released our initial NIS2 whitepaper and its impact on Information Technology (IT) and Operational Technology (OT). Since then, our work on client engagements has enabled us to identify and collect a series of common compliance challenges that organisations across different industries and sectors face under NIS2. This update offers the latest insights into the key challenges NIS2 poses for businesses as well as the internal difficulties companies encounter when working to meet its compliance requirements.
These insights are drawn from 乐鱼（Leyu）体育官网's recent projects, shared knowledge within the 乐鱼（Leyu）体育官网 EMA community, and updates from the EU and Member States. As of October 18, 2024, EU Member States were required to transpose the NIS2 Directive into national law. However, progress has been uneven - some met the deadline with draft laws, while others expect to complete transposition in the second half of 2025. In November 2024, the European Commission issued a formal warning, giving remaining Member States two months to transpose. Although NIS2 is now in effect, most countries still lack fully enforced national laws, leaving many organisations unprepared for compliance.
