Safer business under EU directive
The European NIS2 Directive and the Czech Cybersecurity Act set new cybersecurity obligations for companies and other organizations. We’ll guide you through these new requirements and help you meet them efficiently.
The new obligations will affect more than
NIS2 is an abbreviation for Directive 2022/2555 of
All measures must be in place in companies by
Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union.
It defines minimum cybersecurity requirements for companies and organizations operating in key sectors. Member States must transpose the directive into national law; therefore, a new Czech Cybersecurity Act is currently being drafted to align with NIS2.
The law is expected to enter into force in October 2024.
The directive defines two compliance regimes: the stricter *essential entities* and the lighter *important entities*. Most organizations will fall under the important regime.
How can you tell if NIS2 and the new Czech Cybersecurity Act apply to your organization?
Obligations apply to entities operating in sectors listed in the directive’s annex or in national implementing regulations.
Entities active in the listed sectors that qualify as medium or large enterprises will be subject to the obligations.
Certain exceptions apply, where obligations cover entities regardless of sector or size.