Description
The deadline for companies to complete their first audit verifying NIS2 compliance was extended from December 31, 2025, to June 30, 2026. Organizations must demonstrate implementation of cybersecurity risk management measures, incident response capabilities, and supply chain security.
Requirements
- Complete NIS2 compliance audit
- Demonstrate cybersecurity risk management measures
- Verify incident response capabilities
- Document supply chain security measures
- Prepare audit report for national authority
Applicable To
Essential EntitiesImportant EntitiesEU Critical Infrastructure Operators
Penalty Information
âš Fines up to EUR 10 million or 2% of global annual turnover; personal liability for management bodies.