{"id":11259,"date":"2024-11-27T12:17:19","date_gmt":"2024-11-27T11:17:19","guid":{"rendered":"https:\/\/glofera.com\/2024\/11\/27\/what-is-nis2-and-how-does-it-affect-smes\/"},"modified":"2026-01-28T11:54:12","modified_gmt":"2026-01-28T10:54:12","slug":"what-is-nis2-and-how-does-it-affect-smes","status":"publish","type":"post","link":"https:\/\/glofera.com\/en\/what-is-nis2-and-how-does-it-affect-smes\/","title":{"rendered":"What is NIS2 and how does it affect SMEs?"},"content":{"rendered":"

Do you know if your company complies with current cybersecurity regulations? The NIS2 Directive<\/b> is transforming cybersecurity requirements in the European Union. If you are part of strategic sectors or work with mission-critical companies, this regulation may mean new obligations for your business. In this article, we explain everything you need to know about NIS2, from which companies are affected to its main requirements and how to comply.<\/p>\n<\/div><\/div><\/div>

What is the NIS2 directive?<\/strong><\/h2><\/div>

The NIS2 Directive is an update of the first NIS Directive, adopted in 2016, and seeks to strengthen cybersecurity in Europe. It aims to ensure the resilience of information systems and networks in key sectors, promoting the protection of critical infrastructures against cyber threats. With this new regulation, the EU broadens the scope and tightens the requirements for companies considered essential or important.<\/p>\n<\/div><\/div><\/div>

What types of entities are subject to the NIS2 directive?<\/strong><\/h2><\/div>

The NIS2 affects two types of entities: essential and important. The criteria for classifying a company in one of these categories depends on its sector, the number of employees and its relevance to the economy and society.<\/p>\n<\/div>

Essential entities<\/strong><\/h4><\/div>

These organizations play a critical role in key sectors such as:<\/p>\n<\/div>