{"id":29567,"date":"2024-12-11T13:13:49","date_gmt":"2024-12-11T13:13:49","guid":{"rendered":"https:\/\/thelegalcompany.nl\/?p=29567"},"modified":"2026-09-02T07:17:41","modified_gmt":"2026-09-02T07:17:41","slug":"the-nis2-directive-what-changes-for-your-business","status":"publish","type":"post","link":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/","title":{"rendered":"The NIS2 Directive: What Changes for Your Business?"},"content":{"rendered":"<p>Cybersecurity is an increasingly important topic in our digital world. To better protect companies and organizations against cyber threats, the EU has designed the NIS2 Directive (Network and Information Security). This directive sets out obligations that the Dutch legislature must impose on companies and organizations in critical sectors to strengthen cybersecurity and counter cyberattacks. The directive is the successor to the original NIS Directive, which was implemented in the Netherlands through the Network and Information Systems Security Act (Wbni). The NIS2 Directive introduces even stricter requirements and a broader scope than its predecessor.<\/p>\n<h5><strong>Who does the NIS2 Directive apply to?<\/strong><\/h5>\n<p>The NIS2 Directive targets a broader range of sectors than the original directive, while remaining applicable to sectors that were already covered by the first NIS Directive.<\/p>\n<p>Your organization automatically falls under the NIS2 Directive if:<\/p>\n<ul>\n<li>Your organization is active in one of the sectors listed in<br \/>\n<a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/NL\/TXT\/HTML\/?uri=CELEX:32022L2555#d1e32-143-1\">Annex I of the NIS2 Directive<\/a> (highly critical sectors) <strong>or<\/strong><br \/>\n<a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/NL\/TXT\/HTML\/?uri=CELEX:32022L2555#d1e32-148-1\">Annex II of the NIS2 Directive<\/a> (critical sectors);<\/li>\n<\/ul>\n<p><strong>And<\/strong><\/p>\n<ul>\n<li>You have a medium-sized organization with at least 50 employees or an annual turnover or balance sheet total of more than \u20ac10 million (your organization is an &#8220;important entity&#8221;); <strong><u>or<\/u><\/strong><\/li>\n<li>You have a large organization with more than 250 employees or a net turnover of more than \u20ac50 million and a balance sheet total of more than \u20ac43 million (your organization is an &#8220;essential entity&#8221;).<\/li>\n<\/ul>\n<p>Examples of highly critical sectors include energy, transport, banking, healthcare, digital infrastructure, and public administration.<\/p>\n<p>Examples of critical sectors include digital providers, postal and courier services, and chemicals. These are classified as &#8220;critical&#8221; because disruptions or incidents in their services can have serious consequences for society, the economy, or national security.<\/p>\n<h5><strong>What obligations apply under the NIS2 Directive?<\/strong><\/h5>\n<p>Organizations that fall under the NIS2 Directive face various obligations. Among other things, they acquire <strong>a duty of care<\/strong> to assess cybersecurity risks and take measures to safeguard the security of their services. This includes protecting sensitive information and minimizing the impact of security incidents.<\/p>\n<p>These organizations also acquire <strong>a reporting obligation<\/strong>. Incidents that significantly disrupt essential services must be reported to the supervisory authority, the Digital Infrastructure Inspectorate (Rijksinspectie Digitale Infrastructuur, RDI), within 24 hours. If the incident is a cyber incident, it must also be reported to the Computer Security Incident Response Team (CSIRT). Factors such as the number of those affected and the financial impact determine whether an incident is subject to the reporting obligation.<\/p>\n<p>Organizations falling under the NIS2 Directive will also be subject to supervision. This means checks will be carried out to determine whether the organization complies with its NIS2 obligations, such as the duty of care and the reporting obligation. Work is currently underway to determine which sectors will fall under which supervisory authority.<\/p>\n<h5><strong>How can you prepare?<\/strong><\/h5>\n<p>Although the Dutch implementation of the NIS2 Directive, in the form of the Cybersecurity Act (Cyberbeveiligingswet, Cbw), is not expected to take effect until the <strong><u>third quarter of 2025<\/u><\/strong>, it is important to start taking steps now. You can read how to prepare in our <a href=\"https:\/\/thelegalcompany.nl\/is-uw-bedrijf-digitaal-weerbaar-conform-de-nis2-richtlijn-wat-is-de-laatste-stand-van-zaken\/\">earlier blog on the NIS2 Directive<\/a>.<\/p>\n<p>Do you have questions or need advice on the above? Please contact us directly at <a href=\"mailto:info@thelegalcompany.nl\">info@thelegalcompany.nl<\/a> or call 020 345 0152.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity is an increasingly important topic in our digital world. To better protect companies and organizations against cyber threats, the EU has designed the NIS2 Directive (Network and Information Security). This directive sets out obligations that the Dutch legislature must impose on companies and organizations in critical sectors to strengthen cybersecurity and counter cyberattacks. The [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":24386,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"page_builder":"","iawp_total_views":0,"footnotes":"","_et_pb_custom_css":""},"categories":[206],"tags":[],"class_list":["post-29567","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ict-law"],"acf":[],"_et_pb_custom_css":"","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The NIS2 Directive: What Changes for Your Business? - The Legal Company<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The NIS2 Directive: What Changes for Your Business? - The Legal Company\" \/>\n<meta property=\"og:description\" content=\"Cybersecurity is an increasingly important topic in our digital world. To better protect companies and organizations against cyber threats, the EU has designed the NIS2 Directive (Network and Information Security). This directive sets out obligations that the Dutch legislature must impose on companies and organizations in critical sectors to strengthen cybersecurity and counter cyberattacks. The [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/\" \/>\n<meta property=\"og:site_name\" content=\"The Legal Company\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-11T13:13:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-02T07:17:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1728\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"devteam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"devteam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/\"},\"author\":{\"name\":\"devteam\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"headline\":\"The NIS2 Directive: What Changes for Your Business?\",\"datePublished\":\"2024-12-11T13:13:49+00:00\",\"dateModified\":\"2026-09-02T07:17:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/\"},\"wordCount\":536,\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/nis2-richtlijn-1.jpg\",\"articleSection\":[\"ICT Law\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/\",\"name\":\"The NIS2 Directive: What Changes for Your Business? - The Legal Company\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/nis2-richtlijn-1.jpg\",\"datePublished\":\"2024-12-11T13:13:49+00:00\",\"dateModified\":\"2026-09-02T07:17:41+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/nis2-richtlijn-1.jpg\",\"contentUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/nis2-richtlijn-1.jpg\",\"width\":2500,\"height\":1728},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/the-nis2-directive-what-changes-for-your-business\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The NIS2 Directive: What Changes for Your Business?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\",\"name\":\"The Legal Company\",\"description\":\"Juristen voor het bedrijfsleven\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\",\"name\":\"devteam\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"caption\":\"devteam\"},\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/author\\\/devteam\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The NIS2 Directive: What Changes for Your Business? - The Legal Company","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/","og_locale":"en_US","og_type":"article","og_title":"The NIS2 Directive: What Changes for Your Business? - The Legal Company","og_description":"Cybersecurity is an increasingly important topic in our digital world. To better protect companies and organizations against cyber threats, the EU has designed the NIS2 Directive (Network and Information Security). This directive sets out obligations that the Dutch legislature must impose on companies and organizations in critical sectors to strengthen cybersecurity and counter cyberattacks. The [&hellip;]","og_url":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/","og_site_name":"The Legal Company","article_published_time":"2024-12-11T13:13:49+00:00","article_modified_time":"2026-09-02T07:17:41+00:00","og_image":[{"width":2500,"height":1728,"url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg","type":"image\/jpeg"}],"author":"devteam","twitter_card":"summary_large_image","twitter_misc":{"Written by":"devteam","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#article","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/"},"author":{"name":"devteam","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"headline":"The NIS2 Directive: What Changes for Your Business?","datePublished":"2024-12-11T13:13:49+00:00","dateModified":"2026-09-02T07:17:41+00:00","mainEntityOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/"},"wordCount":536,"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg","articleSection":["ICT Law"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/","url":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/","name":"The NIS2 Directive: What Changes for Your Business? - The Legal Company","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#primaryimage"},"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg","datePublished":"2024-12-11T13:13:49+00:00","dateModified":"2026-09-02T07:17:41+00:00","author":{"@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"breadcrumb":{"@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#primaryimage","url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg","contentUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/nis2-richtlijn-1.jpg","width":2500,"height":1728},{"@type":"BreadcrumbList","@id":"https:\/\/thelegalcompany.nl\/en\/the-nis2-directive-what-changes-for-your-business\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thelegalcompany.nl\/en\/"},{"@type":"ListItem","position":2,"name":"The NIS2 Directive: What Changes for Your Business?"}]},{"@type":"WebSite","@id":"https:\/\/thelegalcompany.nl\/en\/#website","url":"https:\/\/thelegalcompany.nl\/en\/","name":"The Legal Company","description":"Juristen voor het bedrijfsleven","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thelegalcompany.nl\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e","name":"devteam","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","caption":"devteam"},"url":"https:\/\/thelegalcompany.nl\/en\/author\/devteam\/"}]}},"_links":{"self":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29567","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/comments?post=29567"}],"version-history":[{"count":1,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29567\/revisions"}],"predecessor-version":[{"id":29568,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29567\/revisions\/29568"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media\/24386"}],"wp:attachment":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media?parent=29567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/categories?post=29567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/tags?post=29567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}