NIS2 hits many midsize companies that did not consider themselves "critical" so far — suppliers, IT service providers, transport, healthcare-adjacent. National implementation has added more uncertainty.
This quick-check structures applicability, mandatory measures and the typical gaps in the mid-market. Pragmatic, no legal jargon.
What is inside
- Applicability: sectors, thresholds, special cases
- Mandatory measures at a glance
- Risk-management requirements translated to practice
- Notification duties: deadlines and content
- Management liability — what is actually new
- Gap analysis: 10 most common findings in the mid-market