{"id":193292,"date":"2025-02-28T06:25:00","date_gmt":"2025-02-28T05:25:00","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=193292"},"modified":"2025-02-25T00:25:36","modified_gmt":"2025-02-24T23:25:36","slug":"all-about-nis2-directive","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/all-about-nis2-directive","title":{"rendered":"What is the NIS2 Directive?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"193292\" class=\"elementor elementor-193292\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dff5f09 e-flex e-con-boxed e-con\" data-id=\"dff5f09\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e881e8 elementor-widget elementor-widget-text-editor\" data-id=\"5e881e8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><b>Enough is enough&#8230; Cyberattacks have inflicted significant damage on European organizations. The impact was profound not only on these companies but also on many essential services such as electricity and healthcare. The NIS2 directive seeks to enhance and harmonize cybersecurity standards across Europe. What are the implications for French companies, and how concerned should they be?<\/b><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-055801b elementor-widget elementor-widget-text-editor\" data-id=\"055801b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The requirement to comply with certain European standards is <\/span><i><span style=\"font-weight: 400;\">a priori<\/span><\/i><span style=\"font-weight: 400;\"> not well received. Companies face new constraints, the need for costly human resources for reporting, and the looming prospect of heavy fines for non-compliance&#8230; This is the case with the NIS2 directive, which came into effect at the European level on January 17, 2023\u2014with a compliance deadline for France set for October 17, 2024. NIS stands for \u201c<\/span><b>Network and Information Systems<\/b><span style=\"font-weight: 400;\">.\u201d<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-11ecbf6 e-flex e-con-boxed e-con\" data-id=\"11ecbf6\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7a0ffde elementor-widget elementor-widget-heading\" data-id=\"7a0ffde\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\">Why this new European directive?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1b5960 elementor-widget elementor-widget-text-editor\" data-id=\"d1b5960\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The aim of NIS2 is to compel administrations and companies providing essential services to <\/span><b>invest sustainably and effectively in securing their IT systems<\/b><span style=\"font-weight: 400;\">. These companies need not only to be optimally protected but also to be resilient: they should be able to restore operations swiftly if necessary. There is an underlying message: compliance with this directive will generally be less costly than dealing with the aftermath of a cyberattack. According to the study <\/span><i><span style=\"font-weight: 400;\">Cyberattacks in France \u2013 2025 Report<\/span><\/i><span style=\"font-weight: 400;\"> published by jedha.co, 43% of French companies have experienced at least one successful <a href=\"https:\/\/datascientest.com\/en\/cyber-attacks-definition-and-modus-operandi\">cyberattack<\/a>, with the average cost estimated at approximately \u20ac59,000.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4a37888 e-flex e-con-boxed e-con\" data-id=\"4a37888\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-92f8c86 elementor-widget elementor-widget-heading\" data-id=\"92f8c86\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">An issue that goes beyond just companies<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a6ce5bd elementor-widget elementor-widget-text-editor\" data-id=\"a6ce5bd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">It may initially seem that <a href=\"https:\/\/datascientest.com\/en\/cybersecurity-the-ultimate-guide\">cybersecurity is solely a company\u2019s concern<\/a>. If it suffers an attack due to insufficient IT protection, isn\u2019t that just its own misfortune? Why impose the obligation to <\/span><b>secure its data<\/b><span style=\"font-weight: 400;\"> with the threat of potential sanctions?<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48a7a4c elementor-widget elementor-widget-image\" data-id=\"48a7a4c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-1.webp\" class=\"attachment-full size-full wp-image-193297\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-1.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-1-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-1-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-40dcc5f elementor-widget elementor-widget-text-editor\" data-id=\"40dcc5f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The fact is, the proper functioning of some operators is vital to society. In reality, NIS2 aims to protect not only businesses but also citizens from the unfavorable fallout that can result from <\/span><b>cyberattacks<\/b><span style=\"font-weight: 400;\">. Some concrete examples illustrate this.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-06359e3 elementor-widget elementor-widget-heading\" data-id=\"06359e3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\"><font size=\"4\">Hospitals<\/font><\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f4b64f8 elementor-widget elementor-widget-text-editor\" data-id=\"f4b64f8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Consider the example of a hospital or clinic. In recent years, many such establishments have fallen victim to cyberattacks. The consequences were severe: an inability to access patient medical records, the necessity to cancel certain urgent operations&#8230; Patients needed to be redirected to other facilities, and their lives might have been endangered.<\/span><\/p><p><span style=\"font-weight: 400;\">Under the NIS2 directive, hospitals are required to ensure continuous monitoring of their IT security.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6be58ff elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"6be58ff\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Discover our courses<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2528b27 elementor-widget elementor-widget-heading\" data-id=\"2528b27\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\"><font size=\"4\">Energy Suppliers<\/font><\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c7c2581 elementor-widget elementor-widget-text-editor\" data-id=\"c7c2581\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The same applies to an energy supplier. If it suffers an attack that leads to service disruption, it could cause large-scale power outages. Tens or hundreds of thousands of households might find themselves without heating in the middle of winter, critical businesses could be unable to operate, and public functions like traffic lights could cease to work&#8230; Clearly, safeguarding the IT systems of an energy supplier is a major priority, as a disruption can affect multiple sectors.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-521c5fb elementor-widget elementor-widget-heading\" data-id=\"521c5fb\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\"><font size=\"4\">Transportation<\/font><\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a03bb32 elementor-widget elementor-widget-text-editor\" data-id=\"a03bb32\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The transport sector is no exception. The proper functioning of railway signaling systems and adherence to schedules can be crucial for many travelers. Once again, a prolonged outage is rarely conceivable.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ff29f0 elementor-widget elementor-widget-image\" data-id=\"5ff29f0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-2.webp\" class=\"attachment-full size-full wp-image-193296\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-2.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-2-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-2-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f1345c elementor-widget elementor-widget-heading\" data-id=\"8f1345c\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\"><font size=\"4\">Banks<\/font><\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43ef55a elementor-widget elementor-widget-text-editor\" data-id=\"43ef55a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">And what about private banks? A cyberattack could lead to the theft of personal data, which is already quite alarming, but it could also block access to accounts and prevent thousands of users from making everyday purchases or receiving their salaries. Hence, implementing top-level cybersecurity measures is essential here as well.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7ec2d1a e-flex e-con-boxed e-con\" data-id=\"7ec2d1a\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-51a4a4f elementor-widget elementor-widget-heading\" data-id=\"51a4a4f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Why was NIS1 no longer sufficient?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ad1b277 elementor-widget elementor-widget-text-editor\" data-id=\"ad1b277\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The first European directive, NIS1, was issued in 2016. However, since then, <\/span><b>cyberattacks<\/b><span style=\"font-weight: 400;\"> have achieved an unforeseen level of sophistication\u2014especially with the <\/span><a href=\"https:\/\/datascientest.com\/en\/all-about-ransomware\"><span style=\"font-weight: 400;\">rise of ransomware<\/span><\/a><span style=\"font-weight: 400;\">. They have also become more frequent and costly, impacting businesses of all sizes and sectors.<\/span><\/p><p><span style=\"font-weight: 400;\">NIS1 applied to only a limited number of sectors deemed essential (energy, transport, healthcare, etc.). Many critical service providers or administrations were unaffected by its application. Additionally, each member state had the freedom to interpret and implement it, which turned out to be excessive in practice and limited opportunities for coordination and cooperation. This resulted in vulnerabilities that cybercriminals could exploit.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a0a4071 e-flex e-con-boxed e-con\" data-id=\"a0a4071\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4629e86 elementor-widget elementor-widget-heading\" data-id=\"4629e86\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What changes with the NIS2 directive?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-477c9db elementor-widget elementor-widget-text-editor\" data-id=\"477c9db\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">As a result, NIS2 encompasses more sectors and companies, including entire public administrations and also SMEs providing critical services. This improved directive now <\/span><b>harmonizes minimum cybersecurity measures across the EU<\/b><span style=\"font-weight: 400;\">. It <\/span><b>enhances and speeds up incident reporting obligations<\/b><span style=\"font-weight: 400;\">. The deadlines are reduced to 24 hours for an initial notice and 72 hours for a full report submission. Leaders now bear increased personal responsibility. Finally, NIS2 imposes <\/span><b>deterrent sanctions that can reach up to 10 million euros<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">NIS2 takes effect in France on October 17, 2024, but companies typically have a timeframe to implement this directive, which can vary depending on their activity and size.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4786740 elementor-widget elementor-widget-image\" data-id=\"4786740\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-3.webp\" class=\"attachment-full size-full wp-image-193295\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-3.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-3-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-datascientest-3-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dd52610 e-flex e-con-boxed e-con\" data-id=\"dd52610\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c5f9202 elementor-widget elementor-widget-heading\" data-id=\"c5f9202\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Are the fines excessive?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cd3b0d7 elementor-widget elementor-widget-text-editor\" data-id=\"cd3b0d7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">At first glance, a fine that can reach 10 million euros or even 2% of annual global turnover might appear excessive. Rest assured, however. Only sectors truly vital to society (health, energy, transportation, etc.) are subject to such sanctions, and these would only apply in cases of major and repeated breaches. Furthermore, <\/span><b>sanctions are adjusted according to the size and turnover of the company<\/b><span style=\"font-weight: 400;\">: an SME will face much less stringent penalties than a large enterprise with thousands of employees.<\/span><\/p><p><span style=\"font-weight: 400;\">These figures must also be weighed against other factors. Firstly, cyberattacks cost billions of euros annually and often lead to adverse consequences: data theft, service disruption, a decline in public trust in a given operator, etc. For instance, attacks on hospitals have sometimes resulted in enormous <\/span><b>financial costs<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">The goal is to ensure that companies take the security of their <\/span><b>IT infrastructures<\/b><span style=\"font-weight: 400;\"> very seriously. Prevention is better than cure!<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fe1847e elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"fe1847e\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Find a course for you<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-372b73c e-flex e-con-boxed e-con\" data-id=\"372b73c\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-804485d elementor-widget elementor-widget-html\" data-id=\"804485d\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What is the NIS2 directive?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The NIS2 directive is a European regulation adopted to strengthen the cybersecurity of critical infrastructures. It replaces the NIS directive of 2016 and expands its scope to cover more sectors.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What are the main objectives of the NIS2 directive?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The NIS2 directive aims to improve the resilience of critical infrastructures by harmonizing cybersecurity rules across the European Union, imposing strict security and incident management obligations on essential operators.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Which types of companies are affected by the NIS2 directive?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The NIS2 directive applies to companies providing essential services, particularly in the sectors of energy, healthcare, transport, financial services, digital infrastructure, and public administration.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What are the penalties for non-compliance with the NIS2 directive?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"In case of non-compliance, companies may face financial penalties of up to 10 million euros or 2% of their annual global turnover, as well as other corrective measures.\"\r\n      }\r\n    }\r\n  ]\r\n}\r\n<\/script>\r\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Enough is enough&#8230; Cyberattacks have inflicted significant damage on European organizations. The impact was profound not only on these companies but also on many essential services such as electricity and healthcare. The NIS2 directive seeks to enhance and harmonize cybersecurity standards across Europe. What are the implications for French companies, and how concerned should they [&hellip;]<\/p>\n","protected":false},"author":45,"featured_media":193294,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2426],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is the NIS2 Directive?<\/title>\n<meta name=\"description\" content=\"Discover everything about the NIS2 directive, the new European regulation aimed at strengthening the cybersecurity of companies and critical infrastructures. Understand the challenges and get ready.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is the NIS2 Directive?\" \/>\n<meta property=\"og:description\" content=\"Enough is enough... Cyberattacks have inflicted significant damage on European organizations. The impact was profound not only on these companies but also\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\" \/>\n<meta property=\"og:site_name\" content=\"DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-28T05:25:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-24T23:25:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-cybersecurity-datascientest.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Daniel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-nis2-directive#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\"},\"author\":{\"name\":\"Daniel\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\"},\"headline\":\"What is the NIS2 Directive?\",\"datePublished\":\"2025-02-28T05:25:00+00:00\",\"dateModified\":\"2025-02-24T23:25:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\"},\"wordCount\":924,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-nis2-directive#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\",\"url\":\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\",\"name\":\"What is the NIS2 Directive?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2025-02-28T05:25:00+00:00\",\"dateModified\":\"2025-02-24T23:25:36+00:00\",\"description\":\"Discover everything about the NIS2 directive, the new European regulation aimed at strengthening the cybersecurity of companies and critical infrastructures. Understand the challenges and get ready.\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-nis2-directive\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\",\"name\":\"Daniel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"caption\":\"Daniel\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/school\/datascientest\/\",\"user\"],\"jobTitle\":\"ing\u00e9nieur logiciel\",\"worksFor\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/author\/team-redac\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is the NIS2 Directive?","description":"Discover everything about the NIS2 directive, the new European regulation aimed at strengthening the cybersecurity of companies and critical infrastructures. Understand the challenges and get ready.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/all-about-nis2-directive","og_locale":"en_GB","og_type":"article","og_title":"What is the NIS2 Directive?","og_description":"Enough is enough... Cyberattacks have inflicted significant damage on European organizations. The impact was profound not only on these companies but also","og_url":"https:\/\/datascientest.com\/en\/all-about-nis2-directive","og_site_name":"DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2025-02-28T05:25:00+00:00","article_modified_time":"2025-02-24T23:25:36+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/en\/files\/2025\/02\/directive-nis2-cybersecurity-datascientest.webp","type":"image\/webp"}],"author":"Daniel","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Daniel","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/all-about-nis2-directive#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/all-about-nis2-directive"},"author":{"name":"Daniel","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0"},"headline":"What is the NIS2 Directive?","datePublished":"2025-02-28T05:25:00+00:00","dateModified":"2025-02-24T23:25:36+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/all-about-nis2-directive"},"wordCount":924,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Cybersecurity"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/all-about-nis2-directive#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/all-about-nis2-directive","url":"https:\/\/datascientest.com\/en\/all-about-nis2-directive","name":"What is the NIS2 Directive?","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2025-02-28T05:25:00+00:00","dateModified":"2025-02-24T23:25:36+00:00","description":"Discover everything about the NIS2 directive, the new European regulation aimed at strengthening the cybersecurity of companies and critical infrastructures. Understand the challenges and get ready.","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/all-about-nis2-directive"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0","name":"Daniel","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","caption":"Daniel"},"sameAs":["https:\/\/www.linkedin.com\/school\/datascientest\/","user"],"jobTitle":"ing\u00e9nieur logiciel","worksFor":"DataScientest","url":"https:\/\/datascientest.com\/en\/author\/team-redac"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193292"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/45"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=193292"}],"version-history":[{"count":19,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193292\/revisions"}],"predecessor-version":[{"id":193950,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193292\/revisions\/193950"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/193294"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=193292"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=193292"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=193292"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}