Last updated on November 7, 2026
The NIS2 is an EU directive that strengthens and expands cybersecurity requirements for essential and critical entities, aimed at increasing cyber resilience.
Not every company automatically falls under NIS2. It is not always easy to determine whether your organization needs to comply. With the checklist below, you can see at a glance whether the law applies to you.
The fines are substantial: up to €10 million or 2% of global annual turnover for essential entities. The damage from a successful cyberattack is often much greater.
The NIS2 Directive has been in effect since January 16, 2023. In the Netherlands, it has been transposed into the Cybersecurity Act (Cbw), which entered into force on August 15, 2026. If your organization falls under the law, you must register with the NCSC, and the duty of care and reporting obligation already apply.
Companies with a good approach to information security, risk management, incident management, and awareness are much less vulnerable to attacks. Moreover, you gain more control over your business operations, which ensures more stable growth.
1. Don't wait to take action
An implementation takes an average of six months to a year, depending on the organization.
2. Use 80% templates and 20% organization-specific measures
We regularly see organizations that want to reinvent the wheel and are therefore never finished. There are many (free) standards available that do a large part of the work. Supplement these with measures that are specific to your organization
3. Take steps towards cyber resilience, even if you are not required to comply
Even if you are not (yet) required to comply with NIS2, cyber resilience is more important than ever. Prevention is better than cure certainly applies here.
4. Call in external help in time
Can't see the wood for the trees after reading this checklist? Call in external help in time. Coincidentally or not, this is our specialty, and we are happy to help your company take the necessary steps.
Questions about these terms and conditions? Contact us via info@cloudformatie.nl or call +31 85 487 72 18.
