{"id":24940,"date":"2026-10-22T10:12:56","date_gmt":"2026-10-22T17:12:56","guid":{"rendered":"https:\/\/www.netgear.com\/hub\/?page_id=24940"},"modified":"2026-10-22T10:21:48","modified_gmt":"2026-10-22T17:21:48","slug":"nis2-explained-requirements-who-must-act-2","status":"publish","type":"page","link":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/","title":{"rendered":"NIS2 explained: what it requires and who has to act"},"content":{"rendered":"    <div class=\"table-of-content bg-gray 24940\">\n        <p><strong>IN THIS ARTICLE<\/strong><\/p>\n        <ul>\n                        <li><a href=\"#topic1\">What the directive asks for<\/a><\/li>\n                        <li><a href=\"#topic2\">Incident reports have deadlines<\/a><\/li>\n                        <li><a href=\"#topic3\">Management owns the outcome<\/a><\/li>\n                        <li><a href=\"#topic4\">Suppliers are in scope too<\/a><\/li>\n                        <li><a href=\"#topic5\">Where to start<\/a><\/li>\n                    <\/ul>\n    <\/div>\n        <div id=\"topic1\" class=\"skip-item\">\n                        <h2>What the directive asks for<\/h2>\n                <p>Organizations in scope must take appropriate technical and organizational steps to manage risk. The directive lists risk analysis, incident handling, business continuity and backups, supplier security, secure development and vulnerability handling, access control, multi-factor authentication, encryption and staff training.<\/p>\n    <\/div>\n        <div id=\"topic2\" class=\"skip-item\">\n                        <h2>Incident reports have deadlines<\/h2>\n                <p>An early warning is due within 24 hours of becoming aware of a significant incident. A fuller notification follows within 72 hours, and a final report within one month. The early warning has to say whether the incident may be malicious and whether it could affect other EU countries. A team without visibility into its network may spot an incident but not be able to tell how far it has spread in the time allowed. That leaves others exposed to the threat and the organization exposed to penalties.<\/p>\n    <\/div>\n        <div id=\"topic3\" class=\"skip-item\">\n                        <h2>Management owns the outcome<\/h2>\n                <p>Senior management must approve and oversee the security measures, and can face personal liability. The directive also expects leaders to take training. That puts security on the board&#8217;s agenda. Not everyone needs to become a security expert, but everyone in the room should understand the measures and who does what when an incident happens. Practice it like a fire drill.<\/p>\n    <\/div>\n        <div id=\"topic4\" class=\"skip-item\">\n                        <h2>Suppliers are in scope too<\/h2>\n                <p>Organizations in scope must assess the security of their suppliers and service providers, MSPs and resellers included. A small IT partner may never be regulated directly and still be asked to prove its practices to a customer who is.<\/p>\n    <\/div>\n        <div id=\"topic5\" class=\"skip-item\">\n                        <h2>Where to start<\/h2>\n                <p>Each EU member state turns the directive into national law, so check how your country applies it and whether your organization counts as essential or important. More information <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/nis2-directive\">here<\/a>.<\/p>\n    <\/div>\n    \n","protected":false},"excerpt":{"rendered":"","protected":false},"author":102,"featured_media":24941,"parent":6714,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"templates\/blog-wifi.php","meta":{"_acf_changed":false,"content-type":"","_price":"","_stock":"","_tribe_ticket_header":"","_tribe_default_ticket_provider":"","_tribe_ticket_capacity":"0","_ticket_start_date":"","_ticket_end_date":"","_tribe_ticket_show_description":"","_tribe_ticket_show_not_going":false,"_tribe_ticket_use_global_stock":"","_tribe_ticket_global_stock_level":"","_global_stock_mode":"","_global_stock_cap":"","_tribe_rsvp_for_event":"","_tribe_ticket_going_count":"","_tribe_ticket_not_going_count":"","_tribe_tickets_list":"[]","_tribe_ticket_has_attendee_info_fields":false,"footnotes":"","_tec_slr_enabled":"","_tec_slr_layout":""},"class_list":["post-24940","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2 explained: what it requires and who has to act - NETGEAR Blog<\/title>\n<meta name=\"description\" content=\"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 explained: what it requires and who has to act - NETGEAR Blog\" \/>\n<meta property=\"og:description\" content=\"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/\" \/>\n<meta property=\"og:site_name\" content=\"NETGEAR Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/NetgearAU\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-22T17:21:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.netgear.com\/hub\/wp-content\/uploads\/2026\/10\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@NETGEAR\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/\",\"url\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/\",\"name\":\"NIS2 explained: what it requires and who has to act - NETGEAR Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg\",\"datePublished\":\"2026-10-22T17:12:56+00:00\",\"dateModified\":\"2026-10-22T17:21:48+00:00\",\"description\":\"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg\",\"contentUrl\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg\",\"width\":1280,\"height\":720,\"caption\":\"NIS2 explained: what it requires and who has to act\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/nis2-explained-requirements-who-must-act-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Business Articles\",\"item\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Business IT Technology Articles\",\"item\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/business\\\/enterprise-it\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"NIS2 explained: what it requires and who has to act\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#website\",\"url\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/\",\"name\":\"NETGEAR\",\"description\":\"Learn about NETGEAR Products and services\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#organization\",\"name\":\"NETGEAR\",\"url\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"NETGEAR\"},\"image\":{\"@id\":\"https:\\\/\\\/www.netgear.com\\\/hub\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/NetgearAU\\\/\",\"https:\\\/\\\/x.com\\\/NETGEAR\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/netgear\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 explained: what it requires and who has to act - NETGEAR Blog","description":"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/","og_locale":"en_US","og_type":"article","og_title":"NIS2 explained: what it requires and who has to act - NETGEAR Blog","og_description":"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.","og_url":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/","og_site_name":"NETGEAR Blog","article_publisher":"https:\/\/www.facebook.com\/NetgearAU\/","article_modified_time":"2026-10-22T17:21:48+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/www.netgear.com\/hub\/wp-content\/uploads\/2026\/10\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@NETGEAR","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/","url":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/","name":"NIS2 explained: what it requires and who has to act - NETGEAR Blog","isPartOf":{"@id":"https:\/\/www.netgear.com\/hub\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/#primaryimage"},"image":{"@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.netgear.com\/hub\/wp-content\/uploads\/2026\/10\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg","datePublished":"2026-10-22T17:12:56+00:00","dateModified":"2026-10-22T17:21:48+00:00","description":"Learn who NIS2 applies to, what it requires, and how incident reporting, management accountability, and supplier security affect your business.","breadcrumb":{"@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/#primaryimage","url":"https:\/\/www.netgear.com\/hub\/wp-content\/uploads\/2026\/10\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg","contentUrl":"https:\/\/www.netgear.com\/hub\/wp-content\/uploads\/2026\/10\/NIS2-explained-what-it-requires-and-who-has-to-act.jpg","width":1280,"height":720,"caption":"NIS2 explained: what it requires and who has to act"},{"@type":"BreadcrumbList","@id":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/nis2-explained-requirements-who-must-act-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.netgear.com\/hub\/"},{"@type":"ListItem","position":2,"name":"Business Articles","item":"https:\/\/www.netgear.com\/hub\/business\/"},{"@type":"ListItem","position":3,"name":"Business IT Technology Articles","item":"https:\/\/www.netgear.com\/hub\/business\/enterprise-it\/"},{"@type":"ListItem","position":4,"name":"NIS2 explained: what it requires and who has to act"}]},{"@type":"WebSite","@id":"https:\/\/www.netgear.com\/hub\/#website","url":"https:\/\/www.netgear.com\/hub\/","name":"NETGEAR","description":"Learn about NETGEAR Products and services","publisher":{"@id":"https:\/\/www.netgear.com\/hub\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.netgear.com\/hub\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.netgear.com\/hub\/#organization","name":"NETGEAR","url":"https:\/\/www.netgear.com\/hub\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.netgear.com\/hub\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"NETGEAR"},"image":{"@id":"https:\/\/www.netgear.com\/hub\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/NetgearAU\/","https:\/\/x.com\/NETGEAR","https:\/\/www.linkedin.com\/company\/netgear"]}]}},"ticketed":false,"_links":{"self":[{"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/pages\/24940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/users\/102"}],"replies":[{"embeddable":true,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/comments?post=24940"}],"version-history":[{"count":2,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/pages\/24940\/revisions"}],"predecessor-version":[{"id":24943,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/pages\/24940\/revisions\/24943"}],"up":[{"embeddable":true,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/pages\/6714"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/media\/24941"}],"wp:attachment":[{"href":"https:\/\/www.netgear.com\/hub\/wp-json\/wp\/v2\/media?parent=24940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}