{"id":67305,"date":"2026-05-06T17:30:09","date_gmt":"2026-05-06T15:30:09","guid":{"rendered":"https:\/\/swissgrc.com\/ar\/?p=67305"},"modified":"2026-09-17T14:57:35","modified_gmt":"2026-09-17T12:57:35","slug":"nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/","title":{"rendered":"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"67305\" class=\"elementor elementor-67305\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35a9138 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35a9138\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-73cd8ab\" data-id=\"73cd8ab\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b9f303 tt elementor-widget elementor-widget-text-editor\" data-id=\"5b9f303\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\" data-start=\"331\" data-end=\"445\"><strong>When people talk about NIS2 today, one comparison comes up repeatedly: \u201cThis will be the GDPR of cybersecurity.\u201d The comparison sounds logical, but it is misleading and pushes many organizations in the wrong direction.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c9f65d elementor-widget elementor-widget-html\" data-id=\"3c9f65d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<!-- NIS2 Blog Content (EN) \u2013 Swiss GRC | Paste as HTML Widget in Elementor -->\r\n<!--\r\n  LINK VERIFICATION CHECKLIST \u2013 please confirm slugs before publishing:\r\n  \u2713 \/en\/when-grc-stopped-being-periodic-and-became-everyday-work\/   confirmed via sitemap\r\n  \u2713 \/en\/when-risk-enters-through-the-front-door-rethinking-vendor-risk-management\/   confirmed via sitemap\r\n  ? \/en\/risk-management-software\/   please verify\r\n  ? \/en\/tprm-software\/              please verify\r\n  ? \/en\/solutions\/                  please verify\r\n  ? \/en\/discoverycall\/              please verify\r\n-->\r\n<style>\r\n.sgrc-nis2 {\r\n  font-size: 14px;\r\n  color: #585858;\r\n  line-height: 1.85;\r\n}\r\n.sgrc-nis2 a {\r\n  color: #B82850;\r\n  text-decoration: none;\r\n  border-bottom: 1px solid rgba(184,40,80,0.25);\r\n  transition: border-color 0.15s, color 0.15s;\r\n}\r\n.sgrc-nis2 a:hover {\r\n  color: #8f1f3c;\r\n  border-bottom-color: #8f1f3c;\r\n}\r\n.sgrc-nis2 a[target=\"_blank\"]::after {\r\n  content: ' \u2197';\r\n  font-size: 11px;\r\n  opacity: 0.6;\r\n}\r\n.sgrc-nis2 h2 {\r\n  font-size: 18px;\r\n  font-weight: 700;\r\n  color: #2c2c2c;\r\n  margin: 2.8rem 0 1rem;\r\n  line-height: 1.35;\r\n}\r\n.sgrc-nis2 p { margin: 0 0 1.1rem; }\r\n.sgrc-nis2 .nis2-highlight {\r\n  background: #eef2fc;\r\n  border-left: 3px solid #175CFF;\r\n  padding: 1rem 1.3rem;\r\n  border-radius: 0 6px 6px 0;\r\n  margin: 1.5rem 0;\r\n  font-weight: 600;\r\n  color: #002478;\r\n  font-size: 14px;\r\n  line-height: 1.6;\r\n}\r\n.sgrc-nis2 .nis2-infobox {\r\n  background: #f5f7fb;\r\n  border: 1px solid #D4DAE5;\r\n  border-radius: 8px;\r\n  padding: 1.3rem 1.5rem;\r\n  margin: 1.5rem 0;\r\n  font-size: 13.5px;\r\n}\r\n.sgrc-nis2 .nis2-infobox-title {\r\n  font-weight: 700;\r\n  font-size: 12px;\r\n  letter-spacing: 0.09em;\r\n  text-transform: uppercase;\r\n  color: #3a3a3a;\r\n  margin-bottom: 0.65rem;\r\n}\r\n.sgrc-nis2 .nis2-list {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.5rem 0 1.5rem;\r\n  display: flex;\r\n  flex-direction: column;\r\n  gap: 0.45rem;\r\n}\r\n.sgrc-nis2 .nis2-list li {\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.7rem;\r\n  padding: 0.5rem 0.75rem;\r\n  border-radius: 5px;\r\n  transition: background 0.15s;\r\n}\r\n.sgrc-nis2 .nis2-list li:hover { background: #f5f7fb; }\r\n.sgrc-nis2 .nis2-list li::before {\r\n  content: \"\u203a\";\r\n  color: #175CFF;\r\n  font-weight: 700;\r\n  font-size: 16px;\r\n  line-height: 1.5;\r\n  flex-shrink: 0;\r\n}\r\n.sgrc-nis2 .nis2-stat {\r\n  display: flex;\r\n  align-items: center;\r\n  gap: 1.4rem;\r\n  background: #1A2E4C;\r\n  color: #fff;\r\n  padding: 1.3rem 1.8rem;\r\n  border-radius: 8px;\r\n  margin: 2rem 0;\r\n}\r\n.sgrc-nis2 .nis2-stat-number {\r\n  font-size: 40px;\r\n  font-weight: 700;\r\n  color: #fff;\r\n  line-height: 1;\r\n  white-space: nowrap;\r\n}\r\n.sgrc-nis2 .nis2-stat-number span { color: #175CFF; }\r\n.sgrc-nis2 .nis2-stat-label {\r\n  font-size: 13.5px;\r\n  color: rgba(255,255,255,0.72);\r\n  line-height: 1.65;\r\n}\r\n.sgrc-nis2 .nis2-stat-label strong { color: #fff; }\r\n.sgrc-nis2 .nis2-stat-label a {\r\n  color: rgba(255,255,255,0.55);\r\n  border-bottom-color: rgba(255,255,255,0.2);\r\n  font-size: 11.5px;\r\n}\r\n.sgrc-nis2 .nis2-tags {\r\n  display: flex;\r\n  flex-wrap: wrap;\r\n  gap: 0.45rem;\r\n  margin: 0.75rem 0 1.5rem;\r\n}\r\n.sgrc-nis2 .nis2-tag {\r\n  background: #eef0f3;\r\n  color: #3a3a3a;\r\n  font-size: 12.5px;\r\n  font-weight: 600;\r\n  padding: 0.3rem 0.85rem;\r\n  border-radius: 100px;\r\n  border-bottom: none !important;\r\n}\r\n.sgrc-nis2 .nis2-table {\r\n  width: 100%;\r\n  border-collapse: collapse;\r\n  font-size: 13.5px;\r\n  margin: 1.5rem 0 2rem;\r\n  border-radius: 8px;\r\n  overflow: hidden;\r\n  border: 1px solid #D4DAE5;\r\n}\r\n.sgrc-nis2 .nis2-table thead tr { background: #1A2E4C; color: #fff; }\r\n.sgrc-nis2 .nis2-table thead th {\r\n  padding: 0.85rem 1.1rem;\r\n  text-align: left;\r\n  font-weight: 600;\r\n  font-size: 13px;\r\n  letter-spacing: 0.04em;\r\n}\r\n.sgrc-nis2 .nis2-table thead th:first-child { width: 30%; }\r\n.sgrc-nis2 .nis2-table tbody tr { border-bottom: 1px solid #D4DAE5; }\r\n.sgrc-nis2 .nis2-table tbody tr:last-child { border-bottom: none; }\r\n.sgrc-nis2 .nis2-table tbody tr:hover { background: #f5f7fb; }\r\n.sgrc-nis2 .nis2-table tbody td {\r\n  padding: 0.8rem 1.1rem;\r\n  vertical-align: top;\r\n  line-height: 1.6;\r\n  color: #585858;\r\n}\r\n.sgrc-nis2 .nis2-table tbody td:first-child {\r\n  font-weight: 600;\r\n  color: #3a3a3a;\r\n  border-right: 1px solid #D4DAE5;\r\n}\r\n.sgrc-nis2 .nis2-table .col-gdpr { color: #666; }\r\n.sgrc-nis2 .nis2-table .col-nis2 { color: #002478; font-weight: 500; }\r\n.sgrc-nis2 .nis2-grid {\r\n  display: grid;\r\n  grid-template-columns: 1fr 1fr;\r\n  gap: 1px;\r\n  background: #D4DAE5;\r\n  border: 1px solid #D4DAE5;\r\n  border-radius: 8px;\r\n  overflow: hidden;\r\n  margin: 1.2rem 0 2rem;\r\n}\r\n.sgrc-nis2 .nis2-cell {\r\n  background: #fff;\r\n  padding: 1.1rem 1.3rem;\r\n  transition: background 0.15s;\r\n}\r\n.sgrc-nis2 .nis2-cell:hover { background: #eef2fc; }\r\n.sgrc-nis2 .nis2-cell strong {\r\n  display: block;\r\n  font-size: 13px;\r\n  font-weight: 700;\r\n  color: #2c2c2c;\r\n  margin-bottom: 0.25rem;\r\n}\r\n.sgrc-nis2 .nis2-cell span {\r\n  font-size: 12.5px;\r\n  color: #585858;\r\n  line-height: 1.55;\r\n}\r\n.sgrc-nis2 .nis2-benefits {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.75rem 0 1.5rem;\r\n  display: grid;\r\n  grid-template-columns: 1fr 1fr;\r\n  gap: 0.55rem;\r\n}\r\n.sgrc-nis2 .nis2-benefits li {\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.6rem;\r\n  font-size: 13.5px;\r\n  line-height: 1.55;\r\n}\r\n.sgrc-nis2 .nis2-benefits li::before {\r\n  content: \"\u2713\";\r\n  color: #175CFF;\r\n  font-weight: 700;\r\n  flex-shrink: 0;\r\n}\r\n.sgrc-nis2 .nis2-checklist {\r\n  list-style: none;\r\n  padding: 0;\r\n  margin: 0.75rem 0 1.5rem;\r\n  counter-reset: step;\r\n}\r\n.sgrc-nis2 .nis2-checklist li {\r\n  counter-increment: step;\r\n  display: flex;\r\n  align-items: flex-start;\r\n  gap: 0.85rem;\r\n  padding: 0.65rem 0.75rem;\r\n  border-bottom: 1px solid #D4DAE5;\r\n  font-size: 13.5px;\r\n  line-height: 1.6;\r\n}\r\n.sgrc-nis2 .nis2-checklist li:last-child { border-bottom: none; }\r\n.sgrc-nis2 .nis2-checklist li::before {\r\n  content: counter(step);\r\n  display: flex;\r\n  align-items: center;\r\n  justify-content: center;\r\n  min-width: 22px;\r\n  height: 22px;\r\n  background: #1A2E4C;\r\n  color: #fff;\r\n  font-size: 11px;\r\n  font-weight: 700;\r\n  border-radius: 50%;\r\n  flex-shrink: 0;\r\n  margin-top: 0.15rem;\r\n}\r\n.sgrc-nis2 .nis2-divider {\r\n  border: none;\r\n  border-top: 1px solid #D4DAE5;\r\n  margin: 2.5rem 0;\r\n}\r\n@media (max-width: 560px) {\r\n  .sgrc-nis2 .nis2-grid { grid-template-columns: 1fr; }\r\n  .sgrc-nis2 .nis2-benefits { grid-template-columns: 1fr; }\r\n  .sgrc-nis2 .nis2-stat-number { font-size: 28px; }\r\n}\r\n<\/style>\r\n\r\n<div class=\"sgrc-nis2\">\r\n\r\n<p>\r\n  The <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022L2555\" target=\"_blank\" rel=\"noopener\">NIS2 Directive<\/a> is not simply a compliance regulation. It fundamentally changes how organisations must approach digital risk \u2014 shifting the focus away from documentation and towards resilience, operational stability, and accountability at the management level.\r\n<\/p>\r\n<p>\r\n  Many organisations underestimate precisely this distinction \u2014 and in doing so, risk not only regulatory consequences, but operational disruptions, reputational damage, and significant financial exposure. For a broader perspective on how this shift affects day-to-day governance work, see our article <a href=\"https:\/\/swissgrc.com\/en\/when-grc-stopped-being-periodic-and-became-everyday-work\/\">When GRC Stopped Being Periodic and Became Everyday Work<\/a>.\r\n<\/p>\r\n\r\n<h2>Why the GDPR Comparison Falls Short<\/h2>\r\n\r\n<p>GDPR has established a well-worn playbook in many organisations \u2014 and that thinking runs deep:<\/p>\r\n\r\n<table class=\"nis2-table\">\r\n  <thead>\r\n    <tr>\r\n      <th>Criterion<\/th>\r\n      <th>GDPR Approach<\/th>\r\n      <th>NIS2 Requirement<\/th>\r\n    <\/tr>\r\n  <\/thead>\r\n  <tbody>\r\n    <tr>\r\n      <td>Focus<\/td>\r\n      <td class=\"col-gdpr\">Documentation &amp; evidence<\/td>\r\n      <td class=\"col-nis2\">Effectiveness &amp; resilience<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Goal<\/td>\r\n      <td class=\"col-gdpr\">Pass the audit<\/td>\r\n      <td class=\"col-nis2\">Remain operational under attack<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Accountability<\/td>\r\n      <td class=\"col-gdpr\">Data Protection Officer<\/td>\r\n      <td class=\"col-nis2\">Senior management directly<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Nature<\/td>\r\n      <td class=\"col-gdpr\">Static documentation<\/td>\r\n      <td class=\"col-nis2\">Dynamic risk management<\/td>\r\n    <\/tr>\r\n    <tr>\r\n      <td>Response<\/td>\r\n      <td class=\"col-gdpr\">React to requests<\/td>\r\n      <td class=\"col-nis2\">Actively report &amp; manage incidents<\/td>\r\n    <\/tr>\r\n  <\/tbody>\r\n<\/table>\r\n\r\n<div class=\"nis2-highlight\">\r\n  The focus shifts from \"compliance\" to \"cyber resilience\" \u2014 and that is not a gradual evolution, but a fundamental change of direction.\r\n<\/div>\r\n\r\n<h2>NIS2 Makes Cybersecurity a Management Responsibility<\/h2>\r\n\r\n<p>\r\n  One of the most significant changes introduced by NIS2 concerns the executive level. Cybersecurity can no longer be treated as the sole responsibility of the IT department. According to <a href=\"https:\/\/www.bsi.bund.de\/EN\/Themen\/Unternehmen-und-Organisationen\/Informationen-und-Empfehlungen\/Empfehlungen-nach-Angriffszielen\/NIS2\/NIS2_node.html\" target=\"_blank\" rel=\"noopener\">BSI guidance on NIS2 implementation<\/a>, senior management must approve security measures, oversee their execution, and receive regular updates on the organisation's security posture.\r\n<\/p>\r\n<p>This fundamentally reshapes <a href=\"https:\/\/swissgrc.com\/en\/risk-management-software\/\">governance structures<\/a> across many organisations:<\/p>\r\n\r\n<div class=\"nis2-grid\">\r\n  <div class=\"nis2-cell\">\r\n    <strong>Corporate Governance<\/strong>\r\n    <span>Cyber risks become part of the strategic management agenda<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Strategic Relevance<\/strong>\r\n    <span>Security decisions escalate to board level<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Personal Liability<\/strong>\r\n    <span>Legal exposure for executives moves sharply into focus<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\">\r\n    <strong>Budget &amp; Priorities<\/strong>\r\n    <span>Security investments are reassessed and reprioritised<\/span>\r\n  <\/div>\r\n  <div class=\"nis2-cell\" style=\"grid-column: 1 \/ -1;\">\r\n    <strong>Resilience as a Competitive Advantage<\/strong>\r\n    <span>Cyber strength becomes a measurable differentiator in the market<\/span>\r\n  <\/div>\r\n<\/div>\r\n\r\n<p>Cybersecurity is evolving from a technical discipline into a question of sound corporate governance.<\/p>\r\n\r\n<h2>Mid-Market Companies Face Particular Pressure<\/h2>\r\n\r\n<p>Many organisations still assume that NIS2 applies exclusively to operators of critical infrastructure. The reality is considerably broader:<\/p>\r\n\r\n<div class=\"nis2-stat\">\r\n  <div class=\"nis2-stat-number\">30<span>,000<\/span><\/div>\r\n  <div class=\"nis2-stat-label\">\r\n    <strong>companies in Germany alone<\/strong> are estimated to fall under the new NIS2 requirements \u2014 far more than were previously regulated under KRITIS.<br>\r\n    <a href=\"https:\/\/www.enisa.europa.eu\/topics\/cybersecurity-policy\/nis-directive-new\" target=\"_blank\" rel=\"noopener\">Source: ENISA \u2013 NIS2 Overview<\/a>\r\n  <\/div>\r\n<\/div>\r\n\r\n<p>Affected organisations span a wide range of sectors:<\/p>\r\n\r\n<div class=\"nis2-tags\">\r\n  <span class=\"nis2-tag\">Industry &amp; Manufacturing<\/span>\r\n  <span class=\"nis2-tag\">Healthcare<\/span>\r\n  <span class=\"nis2-tag\">Logistics &amp; Transport<\/span>\r\n  <span class=\"nis2-tag\">IT &amp; Cloud Services<\/span>\r\n  <span class=\"nis2-tag\">Food Industry<\/span>\r\n  <span class=\"nis2-tag\">Energy Supply<\/span>\r\n  <span class=\"nis2-tag\">Digital Services<\/span>\r\n<\/div>\r\n\r\n<div class=\"nis2-infobox\">\r\n  <div class=\"nis2-infobox-title\">The Supply Chain Effect<\/div>\r\n  Even organisations not directly regulated are coming under increasing pressure \u2014 because their customers, partners, and principals demand higher security standards. NIS2 explicitly requires the <a href=\"https:\/\/swissgrc.com\/en\/tprm-software\/\">management of supply chain risks<\/a>, extending its reach well beyond directly regulated entities. For a deeper look: <a href=\"https:\/\/swissgrc.com\/en\/when-risk-enters-through-the-front-door-rethinking-vendor-risk-management\/\">Rethinking Vendor Risk Management \u2192<\/a>\r\n<\/div>\r\n\r\n<h2>The Real Problem: Lack of Visibility<\/h2>\r\n\r\n<p>In many organisations, IT infrastructure has grown organically over the years. Cloud solutions, external service providers, hybrid working models, and complex system landscapes create new dependencies \u2014 while a complete overview of the following is often absent:<\/p>\r\n\r\n<ul class=\"nis2-list\">\r\n  <li>Which systems are business-critical?<\/li>\r\n  <li>Where are the greatest risks and vulnerabilities?<\/li>\r\n  <li>Who is responsible for what?<\/li>\r\n  <li>Which third parties have access to sensitive data?<\/li>\r\n  <li>What happens in an emergency \u2014 and who runs the response?<\/li>\r\n<\/ul>\r\n\r\n<div class=\"nis2-highlight\">\r\n  This is precisely where NIS2 intervenes. The directive demands organisational transformation \u2014 not merely the addition of individual security measures.\r\n<\/div>\r\n\r\n<p>\r\n  Concretely, the directive requires structured <a href=\"https:\/\/swissgrc.com\/en\/risk-management-software\/\">risk management<\/a>, incident reporting processes, incident response capabilities, business continuity planning, and supply chain risk consideration. The <a href=\"https:\/\/www.bsi.bund.de\/EN\/Themen\/Unternehmen-und-Organisationen\/Informationen-und-Empfehlungen\/Empfehlungen-nach-Angriffszielen\/NIS2\/NIS2_node.html\" target=\"_blank\" rel=\"noopener\">BSI provides concrete implementation guidance<\/a> to support organisations through this process.\r\n<\/p>\r\n\r\n<hr class=\"nis2-divider\" \/>\r\n\r\n<h2>Why Spreadsheets and Siloed Tools Are Not Enough<\/h2>\r\n\r\n<p>Many organisations are still attempting to address NIS2 with spreadsheets, shared document folders, and isolated tools. The fundamental problem with this approach:<\/p>\r\n\r\n<div class=\"nis2-infobox\">\r\n  <div class=\"nis2-infobox-title\">The Core Problem<\/div>\r\n  Cyber resilience is <strong>dynamic<\/strong>. Risks shift continuously. Suppliers change. Vulnerabilities emerge daily. Reporting obligations demand speed and transparency \u2014 neither of which static documentation can deliver.\r\n<\/div>\r\n\r\n<p>Organisations need <a href=\"https:\/\/swissgrc.com\/en\/solutions\/\">integrated Governance, Risk and Compliance structures<\/a> that bring risks, measures, controls, processes, and accountabilities together in one place. Only then is it possible to:<\/p>\r\n\r\n<ul class=\"nis2-list\">\r\n  <li>Continuously prioritise and manage risks<\/li>\r\n  <li>Implement and track measures effectively<\/li>\r\n  <li>Produce evidence at any time and in full<\/li>\r\n  <li>Manage incidents efficiently and within required timeframes<\/li>\r\n  <li>Meet regulatory requirements on an ongoing basis<\/li>\r\n<\/ul>\r\n\r\n<h2>NIS2 Changes the Way Organisations Think About Cybersecurity<\/h2>\r\n\r\n<p>\r\n  Perhaps the most important point is consistently overlooked in the debate: <strong>NIS2 is not simply a regulatory burden.<\/strong> The directive compels organisations to take a structured, honest look at their digital resilience \u2014 and that, in the long run, is precisely where the strategic advantage lies.\r\n<\/p>\r\n\r\n<p>Organisations with strong cyber resilience benefit from:<\/p>\r\n\r\n<ul class=\"nis2-benefits\">\r\n  <li>More stable operations<\/li>\r\n  <li>Reduced risk of outages<\/li>\r\n  <li>Greater trust from customers and partners<\/li>\r\n  <li>Better insurability<\/li>\r\n  <li>Stronger competitive positioning<\/li>\r\n  <li>Higher regulatory certainty<\/li>\r\n<\/ul>\r\n\r\n<p>\r\n  According to the <a href=\"https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2024\" target=\"_blank\" rel=\"noopener\">ENISA Threat Landscape 2024<\/a>, the frequency and sophistication of cyberattacks targeting European organisations continue to rise. Cybersecurity is becoming an increasingly decisive factor in long-term enterprise value and future viability.\r\n<\/p>\r\n\r\n<hr class=\"nis2-divider\" \/>\r\n\r\n<h2>Now Is the Right Time to Act<\/h2>\r\n\r\n<p>\r\n  Many organisations are still waiting for full clarity on national transposition laws or specific regulatory guidance. That is a risky stance: the threat landscape evolves faster than regulatory processes \u2014 and the expectations of customers, partners, insurers, and supervisory authorities are rising continuously.\r\n<\/p>\r\n\r\n<p>Rather than waiting for regulatory pressure to force action, organisations should move proactively. A practical starting point is the <a href=\"https:\/\/nis2compliant.app\">NIS2 Readiness Check<\/a> \u2014 it shows where your organisation stands in just a few minutes. Or speak directly with our experts in a <a href=\"https:\/\/swissgrc.com\/en\/discoverycall\/\">Discovery Call<\/a>:<\/p>\r\n\r\n<ol class=\"nis2-checklist\">\r\n  <li>Assess applicability \u2014 are you directly or indirectly regulated?<\/li>\r\n  <li>Define governance structures \u2014 who owns accountability internally?<\/li>\r\n  <li>Systematically evaluate risks \u2014 where are the critical gaps?<\/li>\r\n  <li>Establish processes \u2014 reporting channels, incident response, BCM<\/li>\r\n  <li>Clarify responsibilities \u2014 up to and including senior management<\/li>\r\n  <li>Anchor resilience strategically \u2014 as a permanent organisational objective<\/li>\r\n<\/ol>\r\n\r\n<div class=\"nis2-highlight\">\r\n  Because ultimately, NIS2 is not just about compliance. It is about an organisation's ability to remain operational \u2014 even under active digital attack.\r\n<\/div>\r\n\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>When people talk about NIS2 today, one comparison comes up repeatedly:<br \/>\n\u201cThis will be the GDPR of cybersecurity.\u201d The comparison sounds logical, but it is misleading and pushes many organizations in the wrong direction. NIS2 is not simply another compliance regulation. The directive fundamentally changes how organizations must manage digital risk.<\/p>\n","protected":false},"author":8,"featured_media":67307,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Yahya Mohamed Mao","real_author_title":"Chief Marketing Officer","real_author_bio":"Yahya Mohamed Mao is Chief Marketing Officer and Member of the Executive Board at Swiss GRC. In this role, he drives the company's global marketing and communications strategy, shaping brand positioning and market expansion across key regions.","real_author_photo":54996,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[30],"tags":[],"class_list":["post-67305","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yahya Mohamed Mao\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"ar_AR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"NIS2 Is Not an IT Project: Why Resilience Matters\" \/>\n\t\t<meta property=\"og:description\" content=\"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1279\" \/>\n\t\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-06T15:30:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T12:57:35+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"NIS2 Is Not an IT Project: Why Resilience Matters\" \/>\n\t\t<meta name=\"twitter:description\" content=\"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@yibnm\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Yahya Mohamed Mao\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#blogposting\",\"name\":\"NIS2 Is Not an IT Project: Why Resilience Matters\",\"headline\":\"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/yahyaen\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/NIS2-Is-Not-an-IT-Project.png\",\"width\":1279,\"height\":720,\"caption\":\"NIS2 Is Not an IT Project Why Resilience Matters\"},\"datePublished\":\"2026-05-06T17:30:09+02:00\",\"dateModified\":\"2026-09-17T14:57:35+02:00\",\"inLanguage\":\"ar\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#webpage\"},\"articleSection\":\"Industry News\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/industry-news\\\/#listItem\",\"position\":2,\"name\":\"Industry News\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/industry-news\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#listItem\",\"name\":\"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#listItem\",\"position\":3,\"name\":\"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/yahyaen\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/yahyaen\\\/\",\"name\":\"Yahya Mohamed Mao\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3bf99b34df7860c8d0a49d2d8c009068894348156d0a51ba297529d37fbb168d?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Yahya Mohamed Mao\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/yibnm\",\"https:\\\/\\\/ch.linkedin.com\\\/in\\\/yahyamohamedmao\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/\",\"name\":\"NIS2 Is Not an IT Project: Why Resilience Matters\",\"description\":\"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.\",\"inLanguage\":\"ar\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/yahyaen\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/yahyaen\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/NIS2-Is-Not-an-IT-Project.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#mainImage\",\"width\":1279,\"height\":720,\"caption\":\"NIS2 Is Not an IT Project Why Resilience Matters\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\\\/#mainImage\"},\"datePublished\":\"2026-05-06T17:30:09+02:00\",\"dateModified\":\"2026-09-17T14:57:35+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"ar\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>NIS2 Is Not an IT Project: Why Resilience Matters<\/title>\n\n","aioseo_head_json":{"title":"NIS2 Is Not an IT Project: Why Resilience Matters","description":"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.","canonical_url":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#blogposting","name":"NIS2 Is Not an IT Project: Why Resilience Matters","headline":"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity","author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/yahyaen\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png","width":1279,"height":720,"caption":"NIS2 Is Not an IT Project Why Resilience Matters"},"datePublished":"2026-05-06T17:30:09+02:00","dateModified":"2026-09-17T14:57:35+02:00","inLanguage":"ar","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#webpage"},"articleSection":"Industry News"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/ar\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/industry-news\/#listItem","name":"Industry News"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/industry-news\/#listItem","position":2,"name":"Industry News","item":"https:\/\/swissgrc.com\/ar\/category\/industry-news\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#listItem","name":"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#listItem","position":3,"name":"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/industry-news\/#listItem","name":"Industry News"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/ar\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/ar\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/ar\/author\/yahyaen\/#author","url":"https:\/\/swissgrc.com\/ar\/author\/yahyaen\/","name":"Yahya Mohamed Mao","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3bf99b34df7860c8d0a49d2d8c009068894348156d0a51ba297529d37fbb168d?s=96&d=mm&r=g","width":96,"height":96,"caption":"Yahya Mohamed Mao"},"sameAs":["https:\/\/twitter.com\/yibnm","https:\/\/ch.linkedin.com\/in\/yahyamohamedmao"]},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#webpage","url":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/","name":"NIS2 Is Not an IT Project: Why Resilience Matters","description":"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.","inLanguage":"ar","isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/yahyaen\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/ar\/author\/yahyaen\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png","@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#mainImage","width":1279,"height":720,"caption":"NIS2 Is Not an IT Project Why Resilience Matters"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/#mainImage"},"datePublished":"2026-05-06T17:30:09+02:00","dateModified":"2026-09-17T14:57:35+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/ar\/#website","url":"https:\/\/swissgrc.com\/ar\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"ar","publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"}}]},"og:locale":"ar_AR","og:site_name":"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"NIS2 Is Not an IT Project: Why Resilience Matters","og:description":"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.","og:url":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/","og:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png","og:image:secure_url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png","og:image:width":1279,"og:image:height":720,"article:published_time":"2026-05-06T15:30:09+00:00","article:modified_time":"2026-09-17T12:57:35+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"NIS2 Is Not an IT Project: Why Resilience Matters","twitter:description":"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.","twitter:creator":"@yibnm","twitter:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/05\/NIS2-Is-Not-an-IT-Project.png","twitter:label1":"Written by","twitter:data1":"Yahya Mohamed Mao","twitter:label2":"Est. reading time","twitter:data2":"5 minutes"},"aioseo_meta_data":{"post_id":"67305","title":"NIS2 Is Not an IT Project: Why Resilience Matters","description":"NIS2 is reshaping governance, accountability, and cyber resilience. Why businesses must act strategically, not just technically.","keywords":null,"keyphrases":{"focus":{"keyphrase":"NIS2","score":88},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-17 12:58:17","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-05-06 15:28:18","updated":"2026-09-17 13:14:35","focus_keyword":"NIS2","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/category\/industry-news\/\" title=\"Industry News\">Industry News<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tNIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/ar\/"},{"label":"Industry News","link":"https:\/\/swissgrc.com\/ar\/category\/industry-news\/"},{"label":"NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity","link":"https:\/\/swissgrc.com\/ar\/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/67305","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/comments?post=67305"}],"version-history":[{"count":9,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/67305\/revisions"}],"predecessor-version":[{"id":70120,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/67305\/revisions\/70120"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media\/67307"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media?parent=67305"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/categories?post=67305"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/tags?post=67305"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}