{"id":45699,"date":"2024-06-18T19:14:09","date_gmt":"2024-06-18T17:14:09","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?page_id=45699"},"modified":"2026-07-14T09:55:32","modified_gmt":"2026-07-14T07:55:32","slug":"network-information-security-directive-nis2","status":"publish","type":"page","link":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/","title":{"rendered":"Network &#038; Information Security Directive (NIS2)"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"45699\" class=\"elementor elementor-45699\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c90a35f e-con-full e-flex e-con e-parent\" data-id=\"c90a35f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-474d246 elementor-widget elementor-widget-html\" data-id=\"474d246\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-hero\">\r\n<style>\r\n#sgnis2-hero{--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;--gold:#FFCC00;\r\n  font-family:'Inter',sans-serif;position:relative;overflow:hidden;color:#fff;\r\n  background:linear-gradient(155deg,#14243d 0%,var(--navy) 52%,#1c3a5e 100%);}\r\n#sgnis2-hero *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-hero .h-grid{position:absolute;inset:0;pointer-events:none;\r\n  background-image:linear-gradient(rgba(255,255,255,.035) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.035) 1px,transparent 1px);\r\n  background-size:44px 44px;\r\n  -webkit-mask-image:radial-gradient(ellipse 75% 85% at 60% 40%,#000 25%,transparent 75%);\r\n  mask-image:radial-gradient(ellipse 75% 85% at 60% 40%,#000 25%,transparent 75%);}\r\n#sgnis2-hero .h-glow{position:absolute;pointer-events:none;border-radius:50%;filter:blur(90px);}\r\n#sgnis2-hero .h-glow.g1{width:460px;height:460px;top:-200px;left:-120px;background:rgba(45,198,203,.13);}\r\n#sgnis2-hero .h-glow.g2{width:520px;height:520px;bottom:-260px;right:-140px;background:rgba(48,98,165,.22);}\r\n#sgnis2-hero .h-wrap{position:relative;max-width:1180px;margin:0 auto;padding:96px 32px 88px;\r\n  display:grid;grid-template-columns:1.05fr .95fr;gap:56px;align-items:center;}\r\n#sgnis2-hero .h-eyebrow{display:inline-flex;align-items:center;gap:8px;font-size:12.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;\r\n  color:var(--teal2);border:1px solid rgba(45,198,203,.35);border-radius:999px;padding:7px 16px;background:rgba(45,198,203,.08);}\r\n#sgnis2-hero .h-eyebrow .dot{width:7px;height:7px;border-radius:50%;background:var(--mint);box-shadow:0 0 10px var(--mint);}\r\n#sgnis2-hero h1{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(34px,4.6vw,58px);line-height:1.08;letter-spacing:-.015em;margin:24px 0 20px;}\r\n#sgnis2-hero h1 .hl{background:linear-gradient(90deg,var(--teal2),var(--mint));-webkit-background-clip:text;background-clip:text;color:transparent;}\r\n#sgnis2-hero .h-sub{font-size:17.5px;line-height:1.68;color:rgba(255,255,255,.82);max-width:540px;margin-bottom:36px;}\r\n#sgnis2-hero .h-btns{display:flex;gap:14px;flex-wrap:wrap;}\r\n#sgnis2-hero .h-btn{display:inline-flex;align-items:center;gap:10px;font-family:'Anek Latin',sans-serif;font-weight:700;font-size:16.5px;\r\n  padding:16px 28px;border-radius:12px;text-decoration:none;transition:transform .18s,box-shadow .18s,background .18s;color:#fff;}\r\n#sgnis2-hero .h-btn.primary{background:linear-gradient(90deg,var(--teal),var(--mint));box-shadow:0 14px 36px rgba(0,191,173,.28);}\r\n#sgnis2-hero .h-btn.primary:hover{transform:translateY(-2px);box-shadow:0 20px 44px rgba(0,191,173,.38);}\r\n#sgnis2-hero .h-btn.ghost{background:rgba(255,255,255,.06);border:1px solid rgba(255,255,255,.28);}\r\n#sgnis2-hero .h-btn.ghost:hover{background:rgba(255,255,255,.12);transform:translateY(-2px);}\r\n\r\n\/* ------- Animated EU visual ------- *\/\r\n#sgnis2-hero .h-visual{position:relative;display:flex;align-items:center;justify-content:center;min-height:420px;}\r\n#sgnis2-hero .eu-scene{position:relative;width:min(420px,100%);aspect-ratio:1;}\r\n#sgnis2-hero .eu-scene svg{width:100%;height:100%;display:block;overflow:visible;}\r\n#sgnis2-hero .ring-stars{transform-origin:210px 210px;animation:sgnis2-spin 60s linear infinite;}\r\n#sgnis2-hero .ring-dash-outer{transform-origin:210px 210px;animation:sgnis2-spin 90s linear infinite reverse;}\r\n#sgnis2-hero .ring-dash-inner{transform-origin:210px 210px;animation:sgnis2-spin 45s linear infinite;}\r\n#sgnis2-hero .pulse{transform-origin:210px 210px;animation:sgnis2-pulse 4s ease-out infinite;opacity:0;}\r\n#sgnis2-hero .pulse.p2{animation-delay:2s;}\r\n#sgnis2-hero .shield-wrap{animation:sgnis2-float 6s ease-in-out infinite;transform-origin:210px 210px;}\r\n#sgnis2-hero .node{animation:sgnis2-blink 3.2s ease-in-out infinite;}\r\n#sgnis2-hero .node.n2{animation-delay:1.1s;}\r\n#sgnis2-hero .node.n3{animation-delay:2.2s;}\r\n@keyframes sgnis2-spin{to{transform:rotate(360deg);}}\r\n@keyframes sgnis2-pulse{0%{transform:scale(.62);opacity:.5;}80%{opacity:0;}100%{transform:scale(1.18);opacity:0;}}\r\n@keyframes sgnis2-float{0%,100%{transform:translateY(0);}50%{transform:translateY(-9px);}}\r\n@keyframes sgnis2-blink{0%,100%{opacity:.35;}50%{opacity:1;}}\r\n@media (prefers-reduced-motion:reduce){\r\n  #sgnis2-hero .ring-stars,#sgnis2-hero .ring-dash-outer,#sgnis2-hero .ring-dash-inner,\r\n  #sgnis2-hero .pulse,#sgnis2-hero .shield-wrap,#sgnis2-hero .node{animation:none;}\r\n  #sgnis2-hero .pulse{opacity:0;}\r\n  #sgnis2-hero .h-btn{transition:none;}\r\n}\r\n\r\n@media (max-width:960px){\r\n  #sgnis2-hero .h-wrap{grid-template-columns:1fr;gap:44px;padding:72px 24px 64px;}\r\n  #sgnis2-hero .h-visual{min-height:0;}\r\n  #sgnis2-hero .eu-scene{width:min(330px,86vw);}\r\n}\r\n@media (max-width:640px){\r\n  #sgnis2-hero .h-sub{font-size:15.5px;}\r\n  #sgnis2-hero .h-btns{flex-direction:column;align-items:stretch;}\r\n  #sgnis2-hero .h-btn{justify-content:center;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"h-grid\"><\/div>\r\n<div class=\"h-glow g1\"><\/div>\r\n<div class=\"h-glow g2\"><\/div>\r\n\r\n<div class=\"h-wrap\">\r\n  <div class=\"h-copy\">\r\n    <span class=\"h-eyebrow\"><span class=\"dot\"><\/span>EU Directive 2022\/2555 &middot; NIS2<\/span>\r\n    <h1>NIS2 compliance you can <span class=\"hl\">prove<\/span>.<\/h1>\r\n    <p class=\"h-sub\">From scoping analysis to the ten minimum measures to reporting to your supervisory authority: the SwissGRC\u00ae Platform makes your NIS2 implementation structured, traceable and audit ready.<\/p>\r\n    <div class=\"h-btns\">\r\n      <a class=\"h-btn primary\" href=\"#sgnis2-betroffenheit\">Check if you are affected<\/a>\r\n      <a class=\"h-btn ghost\" href=\"#sgnis2-cta\">Request a demo<\/a>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"h-visual\" aria-hidden=\"true\">\r\n    <div class=\"eu-scene\">\r\n      <svg viewBox=\"0 0 420 420\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\r\n        <defs>\r\n          <linearGradient id=\"sgnis2-shield-g\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\">\r\n            <stop offset=\"0\" stop-color=\"#2dc6cb\"\/>\r\n            <stop offset=\"1\" stop-color=\"#00bfad\"\/>\r\n          <\/linearGradient>\r\n          <radialGradient id=\"sgnis2-core-g\" cx=\"50%\" cy=\"42%\" r=\"65%\">\r\n            <stop offset=\"0\" stop-color=\"#24466f\"\/>\r\n            <stop offset=\"1\" stop-color=\"#16294a\"\/>\r\n          <\/radialGradient>\r\n          <filter id=\"sgnis2-soft\" x=\"-40%\" y=\"-40%\" width=\"180%\" height=\"180%\">\r\n            <feGaussianBlur stdDeviation=\"6\" result=\"b\"\/>\r\n            <feMerge><feMergeNode in=\"b\"\/><feMergeNode in=\"SourceGraphic\"\/><\/feMerge>\r\n          <\/filter>\r\n        <\/defs>\r\n\r\n        <!-- pulse rings -->\r\n        <circle class=\"pulse\" cx=\"210\" cy=\"210\" r=\"150\" fill=\"none\" stroke=\"#2dc6cb\" stroke-width=\"1.5\"\/>\r\n        <circle class=\"pulse p2\" cx=\"210\" cy=\"210\" r=\"150\" fill=\"none\" stroke=\"#00bfad\" stroke-width=\"1.5\"\/>\r\n\r\n        <!-- rotating dashed orbits -->\r\n        <g class=\"ring-dash-outer\">\r\n          <circle cx=\"210\" cy=\"210\" r=\"192\" fill=\"none\" stroke=\"rgba(255,255,255,.12)\" stroke-width=\"1\" stroke-dasharray=\"2 10\"\/>\r\n        <\/g>\r\n        <g class=\"ring-dash-inner\">\r\n          <circle cx=\"210\" cy=\"210\" r=\"118\" fill=\"none\" stroke=\"rgba(45,198,203,.28)\" stroke-width=\"1\" stroke-dasharray=\"1 8\"\/>\r\n          <circle class=\"node\" cx=\"210\" cy=\"92\" r=\"4\" fill=\"#2dc6cb\"\/>\r\n          <circle class=\"node n2\" cx=\"312\" cy=\"269\" r=\"4\" fill=\"#00bfad\"\/>\r\n          <circle class=\"node n3\" cx=\"108\" cy=\"269\" r=\"4\" fill=\"#3062a5\"\/>\r\n        <\/g>\r\n\r\n        <!-- EU star ring, slowly rotating -->\r\n        <g class=\"ring-stars\" filter=\"url(#sgnis2-soft)\">\r\n          <g fill=\"#FFCC00\">\r\n            <path id=\"sgnis2-star\" d=\"M210 46l3.53 10.86h11.42l-9.24 6.71 3.53 10.86-9.24-6.71-9.24 6.71 3.53-10.86-9.24-6.71h11.42z\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(30 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(60 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(90 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(120 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(150 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(180 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(210 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(240 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(270 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(300 210 210)\"\/>\r\n            <use href=\"#sgnis2-star\" transform=\"rotate(330 210 210)\"\/>\r\n          <\/g>\r\n        <\/g>\r\n\r\n        <!-- central shield -->\r\n        <g class=\"shield-wrap\">\r\n          <circle cx=\"210\" cy=\"210\" r=\"86\" fill=\"url(#sgnis2-core-g)\" stroke=\"rgba(255,255,255,.14)\" stroke-width=\"1\"\/>\r\n          <path d=\"M210 156l44 16v34c0 30-18 50-44 62-26-12-44-32-44-62v-34z\"\r\n                fill=\"none\" stroke=\"url(#sgnis2-shield-g)\" stroke-width=\"4\" stroke-linejoin=\"round\"\/>\r\n          <path d=\"M191 212l13 13 26-28\" fill=\"none\" stroke=\"url(#sgnis2-shield-g)\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n        <\/g>\r\n      <\/svg>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgnis2-hero');if(!root)return;if(root.getAttribute('data-sgn2-init'))return;root.setAttribute('data-sgn2-init','1');\r\n  root.querySelectorAll('a[href^=\"#\"]').forEach(function(a){\r\n    a.addEventListener('click',function(e){\r\n      var target=document.querySelector(a.getAttribute('href'));\r\n      if(target){e.preventDefault();target.scrollIntoView({behavior:'smooth',block:'start'});}\r\n    });\r\n  });\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2be758b e-con-full e-flex e-con e-parent\" data-id=\"2be758b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a13cdba elementor-widget elementor-widget-html\" data-id=\"a13cdba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-betroffenheit\" lang=\"en\">\r\n<style>\r\n#sgnis2-betroffenheit{scroll-margin-top:96px;--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;--ink:#1A2E4C;--grey:#666666;--bg:#f6f9fb;--line:#e3e9f0;\r\n  font-family:'Inter',sans-serif;background:var(--bg);color:var(--ink);}\r\n#sgnis2-betroffenheit *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-betroffenheit .b-wrap{max-width:1080px;margin:0 auto;padding:84px 32px;}\r\n#sgnis2-betroffenheit .b-eyebrow{font-size:12.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--teal);}\r\n#sgnis2-betroffenheit h2{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(28px,3.4vw,42px);line-height:1.12;letter-spacing:-.01em;margin:12px 0 14px;}\r\n#sgnis2-betroffenheit .b-intro{font-size:16.5px;line-height:1.65;color:#44526a;max-width:640px;}\r\n#sgnis2-betroffenheit .b-card{margin-top:38px;background:#fff;border:1px solid var(--line);border-radius:20px;box-shadow:0 18px 50px rgba(26,46,76,.07);overflow:hidden;}\r\n#sgnis2-betroffenheit .b-steps{display:flex;border-bottom:1px solid var(--line);}\r\n#sgnis2-betroffenheit .b-step{flex:1;padding:16px 12px;text-align:center;font-size:12.5px;font-weight:700;letter-spacing:.03em;color:#93a1b5;border-bottom:3px solid transparent;transition:color .2s,border-color .2s;}\r\n#sgnis2-betroffenheit .b-step.active{color:var(--navy);border-color:var(--mint);}\r\n#sgnis2-betroffenheit .b-step.done{color:var(--teal);}\r\n#sgnis2-betroffenheit .b-body{padding:34px 34px 38px;}\r\n#sgnis2-betroffenheit .b-q{font-family:'Anek Latin',sans-serif;font-weight:700;font-size:22px;margin-bottom:6px;}\r\n#sgnis2-betroffenheit .b-hint{font-size:14px;color:#6b7a92;margin-bottom:22px;}\r\n#sgnis2-betroffenheit .b-opts{display:grid;grid-template-columns:repeat(auto-fill,minmax(min(200px,100%),1fr));gap:12px;}\r\n#sgnis2-betroffenheit .b-opt{min-width:0;max-width:100%;white-space:normal;overflow-wrap:break-word;word-break:normal;hyphens:auto;-webkit-hyphens:auto;line-height:1.4;border:1.5px solid var(--line);border-radius:13px;padding:15px 16px;cursor:pointer;background:#fff;font-size:14.5px;font-weight:600;color:#33415a;transition:border-color .15s,box-shadow .15s,background .15s;text-align:left;}\r\n#sgnis2-betroffenheit .b-opt:hover{border-color:var(--teal2);}\r\n#sgnis2-betroffenheit .b-opt.sel{border-color:var(--teal);background:#f0fbfa;box-shadow:0 0 0 3px rgba(23,162,172,.12);}\r\n#sgnis2-betroffenheit .b-opt small{display:block;font-weight:500;font-size:12px;color:#8493a8;margin-top:3px;}\r\n#sgnis2-betroffenheit .b-grp{font-size:11.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:#93a1b5;margin:22px 0 10px;}\r\n#sgnis2-betroffenheit .b-grp:first-of-type{margin-top:0;}\r\n#sgnis2-betroffenheit .b-grp b{color:var(--teal);}\r\n#sgnis2-betroffenheit .b-nav{display:flex;justify-content:space-between;align-items:center;margin-top:30px;gap:12px;}\r\n#sgnis2-betroffenheit .b-btn{white-space:normal;max-width:100%;font-family:'Anek Latin',sans-serif;font-weight:700;font-size:15.5px;border-radius:11px;padding:13px 26px;cursor:pointer;border:none;transition:transform .15s,box-shadow .15s,opacity .15s;}\r\n#sgnis2-betroffenheit .b-btn.next{background:linear-gradient(92deg,var(--teal),var(--mint));color:#fff;box-shadow:0 8px 22px rgba(0,191,173,.25);}\r\n#sgnis2-betroffenheit .b-btn.next:hover{transform:translateY(-1px);}\r\n#sgnis2-betroffenheit .b-btn.next:disabled{opacity:.4;cursor:not-allowed;transform:none;box-shadow:none;}\r\n#sgnis2-betroffenheit .b-btn.back{background:none;border:1.5px solid var(--line);color:#44526a;display:none;}\r\n\/* Ergebnis *\/\r\n#sgnis2-betroffenheit .b-res{display:none;}\r\n#sgnis2-betroffenheit .b-res.show{display:block;}\r\n#sgnis2-betroffenheit .r-badge{display:inline-block;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:14px;letter-spacing:.05em;text-transform:uppercase;border-radius:999px;padding:9px 20px;margin-bottom:16px;}\r\n#sgnis2-betroffenheit .r-badge.ess{background:#fdeef3;color:var(--magenta);}\r\n#sgnis2-betroffenheit .r-badge.imp{background:#fff6e5;color:#b07a12;}\r\n#sgnis2-betroffenheit .r-badge.ind{background:#eef4fc;color:var(--blue);}\r\n#sgnis2-betroffenheit .r-badge.no{background:#eafaf7;color:#0a8f81;}\r\n#sgnis2-betroffenheit .r-title{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:26px;margin-bottom:10px;}\r\n#sgnis2-betroffenheit .r-text{font-size:15.5px;line-height:1.7;color:#44526a;max-width:680px;}\r\n#sgnis2-betroffenheit .r-facts{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(190px,100%),1fr));gap:12px;margin:24px 0;}\r\n#sgnis2-betroffenheit .r-fact{min-width:0;border:1px solid var(--line);border-radius:13px;padding:15px 16px;background:#fafcfe;}\r\n#sgnis2-betroffenheit .r-fact .k{font-size:11px;font-weight:700;letter-spacing:.09em;text-transform:uppercase;color:#8493a8;margin-bottom:5px;}\r\n#sgnis2-betroffenheit .r-fact .v{font-family:'Anek Latin',sans-serif;font-weight:700;font-size:15.5px;color:var(--navy);line-height:1.35;white-space:normal;overflow-wrap:break-word;hyphens:auto;-webkit-hyphens:auto;}\r\n#sgnis2-betroffenheit .r-ctas{display:flex;flex-wrap:wrap;gap:12px;margin-top:6px;}\r\n#sgnis2-betroffenheit .r-ctas .b-btn.ghost{background:#fff;border:1.5px solid var(--line);color:var(--navy);text-decoration:none;display:inline-block;}\r\n#sgnis2-betroffenheit .r-ctas a.next{text-decoration:none;display:inline-block;}\r\n#sgnis2-betroffenheit .r-again{margin-top:18px;font-size:13.5px;}\r\n#sgnis2-betroffenheit .r-again button{background:none;border:none;color:var(--teal);font-weight:600;cursor:pointer;font-size:13.5px;text-decoration:underline;}\r\n#sgnis2-betroffenheit .b-note{font-size:12.5px;color:#8493a8;margin-top:20px;line-height:1.55;}\r\n@media (max-width:640px){\r\n  #sgnis2-betroffenheit .b-wrap{padding:60px 18px;}\r\n  #sgnis2-betroffenheit .b-body{padding:24px 18px 28px;}\r\n  #sgnis2-betroffenheit .b-step{font-size:10.5px;padding:13px 6px;}\r\n  #sgnis2-betroffenheit .b-btn{width:100%;}\r\n  #sgnis2-betroffenheit .b-nav{flex-direction:column-reverse;}\r\n  #sgnis2-betroffenheit .r-ctas a{width:100%;text-align:center;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"b-wrap\">\r\n  <span class=\"b-eyebrow\">Scope check<\/span>\r\n  <h2>Does NIS2 apply to your organisation?<\/h2>\r\n  <p class=\"b-intro\">Three inputs are enough for a structured first assessment: location, sector and company size. Right here, no form required.<\/p>\r\n\r\n  <div class=\"b-card\">\r\n    <div class=\"b-steps\">\r\n      <div class=\"b-step active\" data-s=\"0\">1 &middot; Location<\/div>\r\n      <div class=\"b-step\" data-s=\"1\">2 &middot; Sector<\/div>\r\n      <div class=\"b-step\" data-s=\"2\">3 &middot; Size<\/div>\r\n      <div class=\"b-step\" data-s=\"3\">Result<\/div>\r\n    <\/div>\r\n    <div class=\"b-body\">\r\n\r\n      <div class=\"b-pane\" data-p=\"0\">\r\n        <div class=\"b-q\">Where does your organisation primarily operate?<\/div>\r\n        <div class=\"b-hint\">What matters is where you provide your services or are established.<\/div>\r\n        <div class=\"b-opts\">\r\n          <button class=\"b-opt\" data-k=\"land\" data-v=\"de\">Germany<small>NIS2UmsuCG, in force since 6 Dec 2025<\/small><\/button>\r\n          <button class=\"b-opt\" data-k=\"land\" data-v=\"at\">Austria<small>NISG 2026, applies from 1 Oct 2026<\/small><\/button>\r\n          <button class=\"b-opt\" data-k=\"land\" data-v=\"ch\">Switzerland<small>Not EU, but indirectly affected<\/small><\/button>\r\n          <button class=\"b-opt\" data-k=\"land\" data-v=\"eu\">Other EU country<small>National implementation applies<\/small><\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"b-pane\" data-p=\"1\" style=\"display:none\">\r\n        <div class=\"b-q\">Which sector do you operate in?<\/div>\r\n        <div class=\"b-hint\">NIS2 distinguishes sectors of high criticality (Annex I) and other critical sectors (Annex II).<\/div>\r\n        <div class=\"b-grp\">Annex I &middot; <b>High criticality<\/b><\/div>\r\n        <div class=\"b-opts\">\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Energy<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Transport<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Banking &amp; financial markets<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Health<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Drinking water &amp; waste water<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Digital infrastructure<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">ICT services (B2B)<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Public administration<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"ess\">Space<\/button>\r\n        <\/div>\r\n        <div class=\"b-grp\">Annex II &middot; <b>Other critical sectors<\/b><\/div>\r\n        <div class=\"b-opts\">\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Postal &amp; courier services<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Waste management<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Chemicals<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Food<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Manufacturing<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Digital providers<\/button>\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"imp\">Research<\/button>\r\n        <\/div>\r\n        <div class=\"b-grp\">Or<\/div>\r\n        <div class=\"b-opts\">\r\n          <button class=\"b-opt\" data-k=\"sek\" data-v=\"none\">None of these sectors<small>e.g. retail, consulting, tourism<\/small><\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"b-pane\" data-p=\"2\" style=\"display:none\">\r\n        <div class=\"b-q\">How large is your organisation?<\/div>\r\n        <div class=\"b-hint\">Based on the EU SME definition: headcount, turnover or balance sheet total.<\/div>\r\n        <div class=\"b-opts\">\r\n          <button class=\"b-opt\" data-k=\"size\" data-v=\"s\">Small<small>Under 50 employees and max. EUR 10 million turnover<\/small><\/button>\r\n          <button class=\"b-opt\" data-k=\"size\" data-v=\"m\">Medium<small>50 to 249 employees or EUR 10 to 50 million turnover<\/small><\/button>\r\n          <button class=\"b-opt\" data-k=\"size\" data-v=\"l\">Large<small>250+ employees or over EUR 50 million turnover<\/small><\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"b-res\" data-p=\"3\"><\/div>\r\n\r\n      <div class=\"b-nav\">\r\n        <button class=\"b-btn back\" id=\"sgn2Back\" type=\"button\">Back<\/button>\r\n        <button class=\"b-btn next\" id=\"sgn2Next\" type=\"button\" disabled>Next<\/button>\r\n      <\/div>\r\n\r\n      <p class=\"b-note\">This first assessment is based on the core criteria of Directive (EU) 2022\/2555 and its national implementations. Special cases such as entities covered regardless of size (e.g. trust services, DNS, TLD, public communication networks) and sector-specific law (e.g. DORA in the financial sector) require separate review. It does not replace legal advice.<\/p>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgnis2-betroffenheit');if(!root)return;if(root.getAttribute('data-sgn2-init'))return;root.setAttribute('data-sgn2-init','1');\r\n  var state={land:null,sek:null,size:null},cur=0;\r\n  var panes=root.querySelectorAll('.b-pane'),res=root.querySelector('.b-res'),\r\n      steps=root.querySelectorAll('.b-step'),\r\n      btnN=root.querySelector('#sgn2Next'),btnB=root.querySelector('#sgn2Back'),\r\n      nav=root.querySelector('.b-nav');\r\n\r\n  root.querySelectorAll('.b-opt').forEach(function(o){\r\n    o.addEventListener('click',function(){\r\n      var k=o.getAttribute('data-k');\r\n      root.querySelectorAll('.b-opt[data-k=\"'+k+'\"]').forEach(function(x){x.classList.remove('sel');});\r\n      o.classList.add('sel');\r\n      state[k]=o.getAttribute('data-v');\r\n      if(k==='sek')state.sekName=o.textContent.split('z.B.')[0].trim();\r\n      btnN.disabled=false;\r\n    });\r\n  });\r\n\r\n  function show(i){\r\n    cur=i;\r\n    panes.forEach(function(p){p.style.display=(+p.getAttribute('data-p')===i)?'':'none';});\r\n    res.classList.toggle('show',i===3);\r\n    steps.forEach(function(s,si){\r\n      s.classList.toggle('active',si===i);\r\n      s.classList.toggle('done',si<i);\r\n    });\r\n    btnB.style.display=i>0&&i<3?'':'none';\r\n    nav.style.display=i===3?'none':'flex';\r\n    btnN.disabled=!( [state.land,state.sek,state.size][i] );\r\n    btnN.textContent=i===2?'Show result':'Next';\r\n    var top=root.querySelector('.b-card').getBoundingClientRect().top+window.pageYOffset-90;\r\n    if(i>0)window.scrollTo({top:top,behavior:'smooth'});\r\n  }\r\n\r\n  btnN.addEventListener('click',function(){\r\n    if(cur<2){show(cur+1);}\r\n    else{render();show(3);}\r\n  });\r\n  btnB.addEventListener('click',function(){show(cur-1);});\r\n\r\n  function fact(k,v){return '<div class=\"r-fact\"><div class=\"k\">'+k+'<\/div><div class=\"v\">'+v+'<\/div><\/div>';}\r\n\r\n  function render(){\r\n    var land=state.land,sek=state.sek,size=state.size;\r\n    var badge,cls,title,text,facts='';\r\n    var landFrist={\r\n      de:fact('Legal basis','NIS2UmsuCG \/ BSIG')+fact('Status','In force since 6 Dec 2025')+fact('Registration','Deadline 6 Mar 2026 passed, BSI grace period until 31 Jul 2026'),\r\n      at:fact('Legal basis','NISG 2026')+fact('Status','Applies from 1 Oct 2026')+fact('Registration','By 31 Dec 2026 with the Federal Office for Cybersecurity'),\r\n      eu:fact('Legal basis','National NIS2 implementation')+fact('Status','Applicable EU-wide since 18 Oct 2024')+fact('Registration','Depends on the member state')\r\n    };\r\n    if(land==='ch'){\r\n      badge='Indirectly affected';cls='ind';\r\n      title='Switzerland is not directly covered, but your customers are.';\r\n      text='As a non-EU country, Switzerland does not implement NIS2. Swiss companies feel the directive nonetheless: through establishments or services in the EU, and above all through the supply chain obligations of their EU customers, who demand security evidence from suppliers. In addition, since 1 April 2025 Switzerland requires cyberattacks on critical infrastructure to be reported to the Federal Office for Cybersecurity (BACS) within 24 hours.';\r\n      facts=fact('Direct obligation','None (not EU law)')+fact('Indirect impact','Supply chain &amp; EU establishments')+fact('Switzerland','ISA reporting duty to BACS, 24h');\r\n    } else if(sek==='none'){\r\n      badge='Likely not directly affected';cls='no';\r\n      title='Your sector does not fall under the annexes of the directive.';\r\n      text='Based on your input, your organisation does not belong to any of the 18 NIS2 sectors. Still, check two points: first, national implementations can extend the scope. Second, affected customers increasingly demand security evidence from their suppliers, so the requirements may reach you through the supply chain.';\r\n      facts=fact('Direct obligation','Likely none')+fact('Watch out for','Supply chain requirements from your customers')+fact('Recommendation','Know your maturity before customers ask');\r\n    } else if(size==='s'){\r\n      badge='Likely not directly affected';cls='no';\r\n      title='Small companies are generally exempt.';\r\n      text='Companies with fewer than 50 employees and up to EUR 10 million turnover are generally not directly in scope. Important exceptions: providers of public communication networks, DNS and TLD services, trust service providers and sole providers of critical services are covered regardless of size. And here too: the supply chain obligations of your customers can pass requirements on to you.';\r\n      facts=fact('Direct obligation','Generally none')+fact('Exceptions','Services covered regardless of size')+fact('Watch out for','Requirements via the supply chain');\r\n    } else {\r\n      var ess=(sek==='ess'&&size==='l');\r\n      var essName=(land==='de')?'particularly important entity':'essential entity';\r\n      badge=ess?(essName.charAt(0).toUpperCase()+essName.slice(1)):'Important entity';\r\n      cls=ess?'ess':'imp';\r\n      title='Your organisation is likely '+(ess?((land==='de'?'a ':'an ')+essName):'an important entity')+'.';\r\n      text=(ess\r\n        ?'Large companies in sectors of high criticality face the strictest regime'+(land==='de'?' (the German BSIG refers to the EU category of essential entities as besonders wichtige Einrichtungen)':'')+': proactive supervision, mandatory registration, binding risk management measures under Art. 21, reporting obligations under Art. 23 and personal accountability of management bodies. Fines reach up to EUR 10 million or 2% of worldwide annual turnover.'\r\n        :'Important entities are subject to the same mandatory measures under Art. 21 and the same reporting obligations under Art. 23, but supervision is primarily event driven. Fines reach up to EUR 7 million or 1.4% of worldwide annual turnover. Management remains personally accountable.');\r\n      facts=(landFrist[land]||landFrist.eu)\r\n        +fact('Fines',ess?'Up to EUR 10m \/ 2% of turnover':'Up to EUR 7m \/ 1.4% of turnover')\r\n        +fact('Reporting duty','24h early warning, 72h notification, 1 month final report')\r\n        +fact('Management bodies','Personal accountability, training duty');\r\n    }\r\n    res.innerHTML='<span class=\"r-badge '+cls+'\">'+badge+'<\/span>'\r\n      +'<div class=\"r-title\">'+title+'<\/div>'\r\n      +'<p class=\"r-text\">'+text+'<\/p>'\r\n      +'<div class=\"r-facts\">'+facts+'<\/div>'\r\n      +'<div class=\"r-ctas\">'\r\n      +'<a class=\"b-btn next\" href=\"#sgnis2-cta\">Contact us<\/a>'\r\n      +'<\/div>'\r\n      +'<div class=\"r-again\"><button type=\"button\" id=\"sgn2Again\">Restart the check<\/button><\/div>';\r\n    var ctaLink=res.querySelector('.r-ctas a[href^=\"#\"]');\r\n    if(ctaLink){ctaLink.addEventListener('click',function(e){\r\n      var tgt=document.querySelector(ctaLink.getAttribute('href'));\r\n      if(tgt){e.preventDefault();tgt.scrollIntoView({behavior:'smooth',block:'start'});}\r\n    });}\r\n    res.querySelector('#sgn2Again').addEventListener('click',function(){\r\n      state={land:null,sek:null,size:null};\r\n      root.querySelectorAll('.b-opt').forEach(function(x){x.classList.remove('sel');});\r\n      show(0);\r\n    });\r\n  }\r\n  show(0);\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-69a61dd e-con-full e-flex e-con e-parent\" data-id=\"69a61dd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-72d7fce elementor-widget elementor-widget-html\" data-id=\"72d7fce\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-fristen\">\r\n<style>\r\n#sgnis2-fristen{--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;--ink:#1A2E4C;--line:#e3e9f0;\r\n  font-family:'Inter',sans-serif;background:#fff;color:var(--ink);}\r\n#sgnis2-fristen *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-fristen .f-wrap{max-width:1080px;margin:0 auto;padding:84px 32px;}\r\n#sgnis2-fristen .f-head{display:flex;flex-wrap:wrap;gap:24px;justify-content:space-between;align-items:flex-end;margin-bottom:34px;}\r\n#sgnis2-fristen .f-head>div:first-child{flex:1 1 0;min-width:min(420px,100%);}\r\n#sgnis2-fristen .f-head .cd{flex:none;}\r\n#sgnis2-fristen .f-eyebrow{font-size:12.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--teal);}\r\n#sgnis2-fristen h2{max-width:620px;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(28px,3.4vw,42px);line-height:1.12;letter-spacing:-.01em;margin:12px 0 12px;}\r\n#sgnis2-fristen .f-intro{font-size:16px;line-height:1.65;color:#44526a;max-width:560px;}\r\n\/* Countdown *\/\r\n#sgnis2-fristen .cd{border:1px solid var(--line);border-radius:16px;padding:18px 22px;background:linear-gradient(180deg,#f8fbfd,#fff);min-width:280px;}\r\n#sgnis2-fristen .cd .k{font-size:11.5px;font-weight:700;letter-spacing:.09em;text-transform:uppercase;color:#8493a8;margin-bottom:8px;}\r\n#sgnis2-fristen .cd .nums{display:flex;gap:14px;}\r\n#sgnis2-fristen .cd .u{text-align:center;}\r\n#sgnis2-fristen .cd .u b{display:block;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:28px;color:var(--navy);font-variant-numeric:tabular-nums;line-height:1;}\r\n#sgnis2-fristen .cd .u span{font-size:10.5px;letter-spacing:.08em;text-transform:uppercase;color:#8493a8;}\r\n\/* Tabs *\/\r\n#sgnis2-fristen .f-tabs{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:28px;}\r\n#sgnis2-fristen .f-tab{font-family:'Anek Latin',sans-serif;font-weight:700;font-size:15px;border:1.5px solid var(--line);background:#fff;color:#44526a;border-radius:999px;padding:10px 22px;cursor:pointer;transition:all .15s;}\r\n#sgnis2-fristen .f-tab:hover{border-color:var(--teal2);}\r\n#sgnis2-fristen .f-tab.active{background:var(--navy);border-color:var(--navy);color:#fff;}\r\n\/* Timeline *\/\r\n#sgnis2-fristen .tl{position:relative;padding-left:30px;display:none;}\r\n#sgnis2-fristen .tl.show{display:block;}\r\n#sgnis2-fristen .tl:before{content:'';position:absolute;left:9px;top:8px;bottom:8px;width:2px;background:linear-gradient(180deg,var(--teal2),var(--line));}\r\n#sgnis2-fristen .tl-item{position:relative;padding:0 0 30px 16px;}\r\n#sgnis2-fristen .tl-item:last-child{padding-bottom:0;}\r\n#sgnis2-fristen .tl-item:before{content:'';position:absolute;left:-27px;top:5px;width:14px;height:14px;border-radius:50%;background:#fff;border:3px solid var(--teal);}\r\n#sgnis2-fristen .tl-item.past:before{background:var(--teal);}\r\n#sgnis2-fristen .tl-item.hot:before{border-color:var(--magenta);box-shadow:0 0 0 5px rgba(184,40,80,.12);}\r\n#sgnis2-fristen .tl-date{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:15px;color:var(--teal);letter-spacing:.02em;}\r\n#sgnis2-fristen .tl-item.hot .tl-date{color:var(--magenta);}\r\n#sgnis2-fristen .tl-t{font-weight:700;font-size:17px;margin:4px 0 5px;color:var(--navy);}\r\n#sgnis2-fristen .tl-d{font-size:14.5px;line-height:1.6;color:#5a6a83;max-width:640px;}\r\n#sgnis2-fristen .tl-tag{display:inline-block;font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;border-radius:7px;padding:4px 9px;margin-top:9px;background:#eafaf7;color:#0a8f81;}\r\n#sgnis2-fristen .tl-tag.warn{background:#fdeef3;color:var(--magenta);}\r\n#sgnis2-fristen .f-note{font-size:12.5px;color:#8493a8;margin-top:30px;line-height:1.55;}\r\n@media (max-width:760px){\r\n  #sgnis2-fristen .f-wrap{padding:60px 18px;}\r\n  #sgnis2-fristen .f-head{flex-direction:column;align-items:flex-start;}\r\n  #sgnis2-fristen .cd{width:100%;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"f-wrap\">\r\n  <div class=\"f-head\">\r\n    <div>\r\n      <span class=\"f-eyebrow\">Deadlines &amp; roadmap<\/span>\r\n      <h2>NIS2 across the DACH region: the clock is ticking.<\/h2>\r\n      <p class=\"f-intro\">Three countries, three speeds. Pick your country and see which deadlines are already running and what comes next.<\/p>\r\n    <\/div>\r\n    <div class=\"cd\" aria-live=\"off\">\r\n      <div class=\"k\">Countdown: NISG 2026 in Austria<\/div>\r\n      <div class=\"nums\">\r\n        <div class=\"u\"><b id=\"sgn2cdD\">0<\/b><span>Days<\/span><\/div>\r\n        <div class=\"u\"><b id=\"sgn2cdH\">0<\/b><span>Hrs<\/span><\/div>\r\n        <div class=\"u\"><b id=\"sgn2cdM\">0<\/b><span>Min<\/span><\/div>\r\n        <div class=\"u\"><b id=\"sgn2cdS\">0<\/b><span>Sec<\/span><\/div>\r\n      <\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"f-tabs\" role=\"tablist\">\r\n    <button class=\"f-tab active\" data-t=\"de\" type=\"button\">&#127465;&#127466; Germany<\/button>\r\n    <button class=\"f-tab\" data-t=\"at\" type=\"button\">&#127462;&#127481; Austria<\/button>\r\n    <button class=\"f-tab\" data-t=\"ch\" type=\"button\">&#127464;&#127469; Switzerland<\/button>\r\n    <button class=\"f-tab\" data-t=\"eu\" type=\"button\">&#127466;&#127482; EU<\/button>\r\n  <\/div>\r\n\r\n  <div class=\"tl show\" data-t=\"de\">\r\n    <div class=\"tl-item past\">\r\n      <div class=\"tl-date\">06.12.2025<\/div>\r\n      <div class=\"tl-t\">NIS2 implementation act in force<\/div>\r\n      <div class=\"tl-d\">The NIS2UmsuCG applies without any transition period. The requirements are anchored in the revised BSI Act. Around 29,500 companies are affected.<\/div>\r\n      <span class=\"tl-tag\">In force<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item past hot\">\r\n      <div class=\"tl-date\">06.03.2026<\/div>\r\n      <div class=\"tl-t\">Mandatory registration with the BSI<\/div>\r\n      <div class=\"tl-d\">The statutory registration deadline with the BSI (portal live since 6 Jan 2026) has passed. The BSI grants latecomers a grace period until 31 July 2026, but late registration remains subject to fines.<\/div>\r\n      <span class=\"tl-tag warn\">Grace period until 31 Jul 2026<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">Ongoing<\/div>\r\n      <div class=\"tl-t\">Risk management, reporting duties, evidence<\/div>\r\n      <div class=\"tl-d\">The measures under Art. 21 and the three-stage reporting duty (24h, 72h, 1 month) apply. The supervisory authority can demand evidence, and management is liable for implementation.<\/div>\r\n      <span class=\"tl-tag warn\">Active<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">December 2028<\/div>\r\n      <div class=\"tl-t\">Evidence deadline for particularly important entities<\/div>\r\n      <div class=\"tl-d\">Particularly important entities must demonstrate implementation of the risk management measures to the BSI within three years of the act entering into force.<\/div>\r\n      <span class=\"tl-tag\">Prepare<\/span>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"tl\" data-t=\"at\">\r\n    <div class=\"tl-item past\">\r\n      <div class=\"tl-date\">23.12.2025<\/div>\r\n      <div class=\"tl-t\">NISG 2026 promulgated<\/div>\r\n      <div class=\"tl-d\">Austria adopts its NIS2 implementation. A new central authority is created, the Federal Office for Cybersecurity. An estimated 4,000 companies are directly affected.<\/div>\r\n      <span class=\"tl-tag\">Adopted<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item hot\">\r\n      <div class=\"tl-date\">01.10.2026<\/div>\r\n      <div class=\"tl-t\">Entry into force: all obligations apply<\/div>\r\n      <div class=\"tl-d\">Risk management measures, reporting duties and the training duty for management bodies become binding. The previous NISG 2018 is repealed.<\/div>\r\n      <span class=\"tl-tag warn\">Key date<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">31.12.2026<\/div>\r\n      <div class=\"tl-t\">Registration deadline<\/div>\r\n      <div class=\"tl-d\">Essential and important entities must be registered with the Federal Office for Cybersecurity. Classification is by self-assessment, and there is no group privilege.<\/div>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">30.09.2027<\/div>\r\n      <div class=\"tl-t\">Self-declaration<\/div>\r\n      <div class=\"tl-d\">Within twelve months of the registration obligation arising, a structured self-declaration must be submitted: implemented measures, risk analysis results, supply chain security.<\/div>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">01.10.2028<\/div>\r\n      <div class=\"tl-t\">Regulatory audits possible<\/div>\r\n      <div class=\"tl-d\">From two years after entry into force, the cybersecurity authority can demand evidence and order audits by independent bodies, for important entities on an event-driven basis.<\/div>\r\n      <span class=\"tl-tag\">Prepare<\/span>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"tl\" data-t=\"ch\">\r\n    <div class=\"tl-item past\">\r\n      <div class=\"tl-date\">01.04.2025<\/div>\r\n      <div class=\"tl-t\">Reporting duty under the ISA<\/div>\r\n      <div class=\"tl-d\">Cyberattacks on critical infrastructure must be reported to the Federal Office for Cybersecurity (BACS) within 24 hours. Switzerland is taking its own path, similar in spirit to NIS2.<\/div>\r\n      <span class=\"tl-tag\">In force<\/span>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">Ongoing<\/div>\r\n      <div class=\"tl-t\">NIS2 reaches through the supply chain<\/div>\r\n      <div class=\"tl-d\">Swiss companies with EU customers or EU establishments receive NIS2 requirements indirectly: through security questionnaires, contract clauses and evidence obligations from their affected business partners.<\/div>\r\n      <span class=\"tl-tag warn\">Relevant for exporters &amp; suppliers<\/span>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"tl\" data-t=\"eu\">\r\n    <div class=\"tl-item past\">\r\n      <div class=\"tl-date\">16.01.2023<\/div>\r\n      <div class=\"tl-t\">Directive (EU) 2022\/2555 in force<\/div>\r\n      <div class=\"tl-d\">NIS2 replaces the 2016 NIS Directive, extends the scope to 18 sectors and tightens supervision and sanctions.<\/div>\r\n    <\/div>\r\n    <div class=\"tl-item past\">\r\n      <div class=\"tl-date\">18.10.2024<\/div>\r\n      <div class=\"tl-t\">Start of application<\/div>\r\n      <div class=\"tl-d\">Member states were required to transpose the directive into national law by 17 Oct 2024. Many followed late, and implementation has been progressing country by country since.<\/div>\r\n    <\/div>\r\n    <div class=\"tl-item\">\r\n      <div class=\"tl-date\">Ongoing<\/div>\r\n      <div class=\"tl-t\">National implementations and implementing acts<\/div>\r\n      <div class=\"tl-d\">For certain digital services, the Commission implementing regulation specifies the security requirements in detail. Nationally, deadlines, authorities and terminology differ, which is particularly demanding for groups with sites in several EU countries.<\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <p class=\"f-note\">As of July 2026. Deadlines and regulatory practice evolve continuously; the respective legal texts and official communications are authoritative.<\/p>\r\n<\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgnis2-fristen');if(!root)return;if(root.getAttribute('data-sgn2-init'))return;root.setAttribute('data-sgn2-init','1');\r\n  root.querySelectorAll('.f-tab').forEach(function(t){\r\n    t.addEventListener('click',function(){\r\n      root.querySelectorAll('.f-tab').forEach(function(x){x.classList.remove('active');});\r\n      t.classList.add('active');\r\n      var k=t.getAttribute('data-t');\r\n      root.querySelectorAll('.tl').forEach(function(tl){tl.classList.toggle('show',tl.getAttribute('data-t')===k);});\r\n    });\r\n  });\r\n  var target=new Date('2026-10-01T00:00:00+02:00').getTime();\r\n  var D=root.querySelector('#sgn2cdD'),H=root.querySelector('#sgn2cdH'),M=root.querySelector('#sgn2cdM'),S=root.querySelector('#sgn2cdS');\r\n  function pad(n){return n<10?'0'+n:''+n;}\r\n  function tick(){\r\n    var diff=Math.max(0,target-Date.now());\r\n    D.textContent=Math.floor(diff\/864e5);\r\n    H.textContent=pad(Math.floor(diff\/36e5)%24);\r\n    M.textContent=pad(Math.floor(diff\/6e4)%60);\r\n    S.textContent=pad(Math.floor(diff\/1e3)%60);\r\n  }\r\n  tick();setInterval(tick,1000);\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8cd44bc e-con-full e-flex e-con e-parent\" data-id=\"8cd44bc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-42f808d elementor-widget elementor-widget-html\" data-id=\"42f808d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-anforderungen\" lang=\"en\">\r\n<style>\r\n#sgnis2-anforderungen{max-width:100%;overflow-x:hidden;--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;--ink:#1A2E4C;--line:#e3e9f0;--bg:#f6f9fb;\r\n  font-family:'Inter',sans-serif;background:var(--bg);color:var(--ink);}\r\n#sgnis2-anforderungen *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-anforderungen .a-wrap{max-width:1160px;margin:0 auto;padding:84px 32px;}\r\n#sgnis2-anforderungen .a-eyebrow{white-space:normal;overflow-wrap:break-word;max-width:100%;font-size:12.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--teal);}\r\n#sgnis2-anforderungen h2{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(28px,3.4vw,42px);line-height:1.12;letter-spacing:-.01em;margin:12px 0 14px;}\r\n#sgnis2-anforderungen .a-intro{font-size:16.5px;line-height:1.65;color:#44526a;max-width:660px;margin-bottom:40px;}\r\n#sgnis2-anforderungen .a-grid{display:grid;grid-template-columns:minmax(0,380px) minmax(0,1fr);gap:22px;align-items:start;}\r\n#sgnis2-anforderungen .a-list{display:flex;flex-direction:column;gap:8px;}\r\n#sgnis2-anforderungen .a-item{display:flex;align-items:center;gap:14px;min-width:0;max-width:100%;white-space:normal;border:1.5px solid var(--line);background:#fff;border-radius:13px;padding:13px 16px;cursor:pointer;text-align:left;transition:border-color .15s,box-shadow .15s,transform .15s;width:100%;}\r\n#sgnis2-anforderungen .a-item:hover{border-color:var(--teal2);}\r\n#sgnis2-anforderungen .a-item.active{border-color:var(--teal);box-shadow:0 8px 24px rgba(23,162,172,.14);transform:translateX(4px);}\r\n#sgnis2-anforderungen .a-lit{flex:none;width:34px;height:34px;border-radius:9px;display:flex;align-items:center;justify-content:center;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:14px;background:#eef7f8;color:var(--teal);}\r\n#sgnis2-anforderungen .a-item.active .a-lit{background:linear-gradient(135deg,var(--teal),var(--mint));color:#fff;}\r\n#sgnis2-anforderungen .a-name{flex:1;min-width:0;font-weight:600;font-size:14.5px;color:#33415a;line-height:1.35;white-space:normal;overflow-wrap:break-word;hyphens:auto;-webkit-hyphens:auto;}\r\n#sgnis2-anforderungen .a-detail{min-width:0;max-width:100%;overflow-wrap:break-word;background:#fff;border:1px solid var(--line);border-radius:18px;padding:32px;box-shadow:0 18px 50px rgba(26,46,76,.06);position:sticky;top:100px;min-height:380px;}\r\n#sgnis2-anforderungen .d-lit{font-size:12px;font-weight:700;letter-spacing:.09em;text-transform:uppercase;color:var(--teal);}\r\n#sgnis2-anforderungen .d-title{white-space:normal;overflow-wrap:break-word;hyphens:auto;-webkit-hyphens:auto;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:24px;margin:8px 0 14px;line-height:1.2;}\r\n#sgnis2-anforderungen .d-req{font-size:15px;line-height:1.7;color:#44526a;padding:16px 18px;border-left:3px solid var(--blue);background:#f6f9fd;border-radius:0 12px 12px 0;margin-bottom:20px;}\r\n#sgnis2-anforderungen .d-req b{color:var(--navy);}\r\n#sgnis2-anforderungen .d-how-k{font-size:12px;font-weight:700;letter-spacing:.09em;text-transform:uppercase;color:#8493a8;margin-bottom:8px;}\r\n#sgnis2-anforderungen .d-how{font-size:15px;line-height:1.7;color:#44526a;margin-bottom:20px;}\r\n#sgnis2-anforderungen .d-tags{display:flex;flex-wrap:wrap;gap:8px;}\r\n#sgnis2-anforderungen .d-tag{white-space:normal;overflow-wrap:break-word;max-width:100%;font-size:12px;font-weight:700;border-radius:8px;padding:6px 12px;background:#eafaf7;color:#0a8f81;border:1px solid #cdeee8;}\r\n#sgnis2-anforderungen .d-tag.blue{background:#eef4fc;color:var(--blue);border-color:#d6e3f5;}\r\n\/* Meldeprozess *\/\r\n#sgnis2-anforderungen .m-band{margin-top:56px;background:var(--navy);border-radius:20px;padding:40px 36px;color:#fff;position:relative;overflow:hidden;}\r\n#sgnis2-anforderungen .m-band:before{content:'';position:absolute;inset:0;background-image:linear-gradient(rgba(255,255,255,.05) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.05) 1px,transparent 1px);background-size:48px 48px;-webkit-mask-image:radial-gradient(ellipse at 20% 0%,#000 20%,transparent 70%);mask-image:radial-gradient(ellipse at 20% 0%,#000 20%,transparent 70%);}\r\n#sgnis2-anforderungen .m-in{position:relative;}\r\n#sgnis2-anforderungen .m-k{display:block;white-space:normal;overflow-wrap:break-word;max-width:100%;font-size:12px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--teal2);}\r\n#sgnis2-anforderungen .m-t{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(22px,2.6vw,30px);margin:8px 0 26px;}\r\n#sgnis2-anforderungen .m-steps{display:grid;grid-template-columns:repeat(3,1fr);gap:16px;}\r\n#sgnis2-anforderungen .m-step{border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.05);border-radius:14px;padding:20px;}\r\n#sgnis2-anforderungen .m-step .n{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:30px;background:linear-gradient(92deg,var(--teal2),var(--mint));-webkit-background-clip:text;background-clip:text;color:transparent;line-height:1;}\r\n#sgnis2-anforderungen .m-step .h{font-weight:700;font-size:15.5px;margin:10px 0 6px;}\r\n#sgnis2-anforderungen .m-step p{font-size:13.5px;line-height:1.6;color:rgba(255,255,255,.75);}\r\n@media (max-width:960px){\r\n  #sgnis2-anforderungen .a-grid{grid-template-columns:1fr;gap:0;}\r\n  #sgnis2-anforderungen .a-list{gap:10px;}\r\n  #sgnis2-anforderungen .a-item{min-width:0;}\r\n  #sgnis2-anforderungen .a-item.active{transform:none;}\r\n  \/* Accordion: detail panel moves under the active item via JS *\/\r\n  #sgnis2-anforderungen .a-detail{position:static;min-height:0;border-radius:0 0 14px 14px;border-top:none;margin-top:-1px;box-shadow:0 12px 30px rgba(26,46,76,.06);padding:24px 20px 26px;}\r\n  #sgnis2-anforderungen .a-item.active{border-radius:14px 14px 0 0;border-bottom-color:transparent;}\r\n  #sgnis2-anforderungen .a-item .a-chev{margin-left:auto;flex:none;transition:transform .2s;}\r\n  #sgnis2-anforderungen .a-item.active .a-chev{transform:rotate(180deg);}\r\n  #sgnis2-anforderungen .m-steps{grid-template-columns:1fr;}\r\n}\r\n@media (min-width:961px){\r\n  #sgnis2-anforderungen .a-item .a-chev{display:none;}\r\n}\r\n@media (max-width:640px){\r\n  #sgnis2-anforderungen .a-wrap{padding:60px 18px;}\r\n  #sgnis2-anforderungen .a-detail{padding:22px 18px;}\r\n  #sgnis2-anforderungen .m-band{padding:28px 20px;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"a-wrap\">\r\n  <span class=\"a-eyebrow\">Art. 21(2) &middot; The mandatory measures<\/span>\r\n  <h2>Ten measures, one system.<\/h2>\r\n  <p class=\"a-intro\">NIS2 requires every in-scope entity to implement ten minimum measures, from risk analysis to multi-factor authentication. Click through: what the directive demands and how you implement it on the SwissGRC\u00ae Platform.<\/p>\r\n\r\n  <div class=\"a-grid\">\r\n    <div class=\"a-list\" id=\"sgn2AList\" role=\"tablist\"><\/div>\r\n    <div class=\"a-detail\" id=\"sgn2ADetail\" aria-live=\"polite\"><\/div>\r\n  <\/div>\r\n\r\n  <div class=\"m-band\">\r\n    <div class=\"m-in\">\r\n      <span class=\"m-k\">Art. 23 &middot; Reporting duty for significant incidents<\/span>\r\n      <div class=\"m-t\">Three deadlines you must meet when it happens.<\/div>\r\n      <div class=\"m-steps\">\r\n        <div class=\"m-step\"><span class=\"n\">24h<\/span><div class=\"h\">Early warning<\/div><p>Without undue delay after becoming aware: initial notification to the competent authority or CSIRT, including any suspicion of unlawful action or cross-border impact.<\/p><\/div>\r\n        <div class=\"m-step\"><span class=\"n\">72h<\/span><div class=\"h\">Notification<\/div><p>Structured assessment of the incident: severity, impact and, where available, indicators of compromise.<\/p><\/div>\r\n        <div class=\"m-step\"><span class=\"n\">1 month<\/span><div class=\"h\">Final report<\/div><p>Detailed description of the incident, its causes and the remediation taken. Interim reports upon request.<\/p><\/div>\r\n      <\/div>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgnis2-anforderungen');if(!root)return;if(root.getAttribute('data-sgn2-init'))return;root.setAttribute('data-sgn2-init','1');\r\n  var DATA=[\r\n    {l:'a',n:'Risk analysis &amp; security policies',req:'Policies on <b>risk analysis<\/b> and <b>information system security<\/b>: risks must be systematically identified, assessed and treated.',how:'In the risk management module you capture cyber risks against uniform criteria, assess gross and net risk and link every measure directly to its risk. Dashboards show treatment status in real time.',tags:['Risk Management','Dashboards &amp; Reporting']},\r\n    {l:'b',n:'Incident handling',req:'<b>Prevention, detection and handling<\/b> of security incidents, including documented response processes.',how:'Incident management guides incidents in a structured way from capture through assessment to closure, with workflows, responsibilities and complete documentation for reporting under Art. 23.',tags:['Incident Management','Workflows']},\r\n    {l:'c',n:'Business continuity &amp; crisis management',req:'Keeping the business running: <b>backup management<\/b>, <b>disaster recovery<\/b> and <b>crisis management<\/b>.',how:'In the BCM module you model critical business processes, run business impact analyses and keep contingency and recovery plans current and testable.',tags:['Business Continuity','BIA &amp; Contingency Plans']},\r\n    {l:'d',n:'Supply chain security',req:'<b>Supply chain security<\/b>, including relationships with direct suppliers and service providers.',how:'With third-party risk management you assess suppliers via questionnaires, classify them by criticality and monitor risks continuously. Third-Party Intelligence adds external signals on your providers.',tags:['Third-Party Risk Management','Third-Party Intelligence']},\r\n    {l:'e',n:'Secure acquisition &amp; vulnerabilities',req:'Security in the <b>acquisition, development and maintenance<\/b> of IT systems, including <b>vulnerability handling and disclosure<\/b>.',how:'You map acquisition and development requirements as controls and policies, and track vulnerabilities as measures with deadlines, owners and escalation logic.',tags:['ISMS','Measure Management']},\r\n    {l:'f',n:'Assessing effectiveness',req:'Policies and procedures to <b>assess the effectiveness<\/b> of the risk management measures.',how:'Through the internal control system and audit functions you test controls regularly, document results and derive improvements, audit-proof and repeatable.',tags:['Internal Control (ICS)','Internal Audit']},\r\n    {l:'g',n:'Cyber hygiene &amp; training',req:'Basic <b>cyber hygiene<\/b> practices and cybersecurity <b>training<\/b>, including for management bodies.',how:'You plan and track training measures centrally, with proof of participation. This also evidences the management training duty under Art. 20.',tags:['Measure Management','Evidence']},\r\n    {l:'h',n:'Cryptography &amp; encryption',req:'Policies and procedures on the <b>use of cryptography<\/b> and, where appropriate, encryption.',how:'You manage crypto policies in policy management with versioning, approval workflow and distribution. Implementation is verified through linked controls.',tags:['Policy Management','Controls']},\r\n    {l:'i',n:'Personnel, access &amp; assets',req:'<b>Human resources security<\/b>, <b>access control<\/b> policies and <b>asset management<\/b>.',how:'You inventory and classify protected objects and assets in the ISMS, including responsibilities. Access concepts and personnel security are documented as policies with associated controls.',tags:['ISMS &amp; Protected Objects','Access Concepts']},\r\n    {l:'j',n:'MFA &amp; secured communication',req:'<b>Multi-factor authentication<\/b>, secured voice, video and text communication and secured emergency communication.',how:'You anchor the technical requirements as binding controls with a clear implementation status. Exceptions and compensating measures are documented traceably for every audit.',tags:['Controls','Exception Management']}\r\n  ];\r\n  var list=root.querySelector('#sgn2AList'),det=root.querySelector('#sgn2ADetail');list.innerHTML='';\r\n  var chev='<svg class=\"a-chev\" width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M6 9l6 6 6-6\"\/><\/svg>';\r\n  function isMobile(){return window.matchMedia('(max-width:960px)').matches;}\r\n  DATA.forEach(function(d,i){\r\n    var b=document.createElement('button');\r\n    b.type='button';b.className='a-item'+(i===0?' active':'');\r\n    b.innerHTML='<span class=\"a-lit\">'+d.l+'<\/span><span class=\"a-name\">'+d.n+'<\/span>'+chev;\r\n    b.addEventListener('click',function(){\r\n      var wasActive=b.classList.contains('active');\r\n      if(isMobile()&&wasActive){\r\n        b.classList.remove('active');det.style.display='none';return;\r\n      }\r\n      list.querySelectorAll('.a-item').forEach(function(x){x.classList.remove('active');});\r\n      b.classList.add('active');det.style.display='';render(i);placeDetail(b);\r\n    });\r\n    list.appendChild(b);\r\n  });\r\n  function placeDetail(btn){\r\n    if(isMobile()){ btn.insertAdjacentElement('afterend',det); }\r\n    else if(det.previousElementSibling!==list){ list.insertAdjacentElement('afterend',det); }\r\n  }\r\n  function render(i){\r\n    var d=DATA[i];\r\n    det.innerHTML='<span class=\"d-lit\">Art. 21(2)('+d.l+')<\/span>'\r\n      +'<div class=\"d-title\">'+d.n+'<\/div>'\r\n      +'<div class=\"d-req\">'+d.req+'<\/div>'\r\n      +'<div class=\"d-how-k\">How you implement it on the SwissGRC\u00ae Platform<\/div>'\r\n      +'<div class=\"d-how\">'+d.how+'<\/div>'\r\n      +'<div class=\"d-tags\">'+d.tags.map(function(t,ti){return '<span class=\"d-tag'+(ti>0?' blue':'')+'\">'+t+'<\/span>';}).join('')+'<\/div>';\r\n  }\r\n  render(0);\r\n  (function(){\r\n    var active=function(){return list.querySelector('.a-item.active')||list.querySelector('.a-item');};\r\n    placeDetail(active());\r\n    var t;\r\n    window.addEventListener('resize',function(){clearTimeout(t);t=setTimeout(function(){\r\n      det.style.display='';placeDetail(active());\r\n    },150);});\r\n  })();\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-06c2bf4 e-con-full e-flex e-con e-parent\" data-id=\"06c2bf4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1ac45d9 elementor-widget elementor-widget-html\" data-id=\"1ac45d9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-faq\" lang=\"en\">\r\n<style>\r\n#sgnis2-faq{--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;--ink:#1A2E4C;--line:#e3e9f0;\r\n  font-family:'Inter',sans-serif;background:#fff;color:var(--ink);}\r\n#sgnis2-faq *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-faq .q-wrap{max-width:880px;margin:0 auto;padding:84px 32px;}\r\n#sgnis2-faq .q-eyebrow{white-space:normal;overflow-wrap:break-word;max-width:100%;font-size:12.5px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--teal);text-align:center;display:block;}\r\n#sgnis2-faq h2{font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(28px,3.4vw,42px);line-height:1.12;text-align:center;margin:12px 0 12px;}\r\n#sgnis2-faq .q-intro{font-size:16px;line-height:1.6;color:#44526a;text-align:center;max-width:560px;margin:0 auto 42px;}\r\n#sgnis2-faq .q-item{border:1px solid var(--line);border-radius:14px;margin-bottom:10px;background:#fff;overflow:hidden;transition:box-shadow .2s,border-color .2s;}\r\n#sgnis2-faq .q-item.open{border-color:var(--teal2);box-shadow:0 12px 32px rgba(23,162,172,.10);}\r\n#sgnis2-faq .q-btn{width:100%;max-width:100%;display:flex;align-items:center;gap:16px;padding:20px 22px;background:none;border:none;cursor:pointer;text-align:left;}\r\n#sgnis2-faq .q-btn .qt{min-width:0;white-space:normal;overflow-wrap:break-word;hyphens:auto;-webkit-hyphens:auto;font-family:'Anek Latin',sans-serif;font-weight:700;font-size:17px;color:var(--navy);flex:1;line-height:1.35;}\r\n#sgnis2-faq .q-btn .qi{flex:none;width:30px;height:30px;border-radius:9px;background:#eef7f8;display:flex;align-items:center;justify-content:center;transition:background .2s,transform .25s;}\r\n#sgnis2-faq .q-item.open .q-btn .qi{background:linear-gradient(135deg,var(--teal),var(--mint));transform:rotate(45deg);}\r\n#sgnis2-faq .q-btn .qi svg{width:15px;height:15px;stroke:var(--teal);stroke-width:2.6;stroke-linecap:round;fill:none;transition:stroke .2s;}\r\n#sgnis2-faq .q-item.open .q-btn .qi svg{stroke:#fff;}\r\n#sgnis2-faq .q-panel{max-height:0;overflow:hidden;transition:max-height .35s ease;}\r\n#sgnis2-faq .q-a{padding:0 22px 22px;font-size:15px;line-height:1.72;color:#44526a;}\r\n#sgnis2-faq .q-a b{color:var(--navy);}\r\n#sgnis2-faq .q-more{text-align:center;margin-top:34px;font-size:14.5px;color:#5a6a83;}\r\n#sgnis2-faq .q-more a{color:var(--teal);font-weight:700;text-decoration:none;}\r\n#sgnis2-faq .q-more a:hover{text-decoration:underline;}\r\n@media (prefers-reduced-motion:reduce){#sgnis2-faq .q-panel{transition:none;}}\r\n@media (max-width:640px){\r\n  #sgnis2-faq .q-wrap{padding:60px 18px;}\r\n  #sgnis2-faq .q-btn{padding:16px;}\r\n  #sgnis2-faq .q-btn .qt{font-size:15.5px;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"q-wrap\">\r\n  <span class=\"q-eyebrow\">FAQ<\/span>\r\n  <h2>Frequently asked questions<\/h2>\r\n  <p class=\"q-intro\">The questions companies ask us most often when introducing their NIS2 solution. Answered directly, no detours.<\/p>\r\n\r\n  <div class=\"q-list\">\r\n    <div class=\"q-item\">\r\n      <button class=\"q-btn\" type=\"button\" aria-expanded=\"false\"><span class=\"qt\">Who is affected by NIS2?<\/span><span class=\"qi\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 5v14M5 12h14\"\/><\/svg><\/span><\/button>\r\n      <div class=\"q-panel\"><div class=\"q-a\">In principle, medium and large companies (50+ employees or over EUR 10 million turnover) in the <b>18 sectors of Annexes I and II<\/b>, from energy and health to manufacturing. Certain services such as DNS, TLD or trust services are covered regardless of size, and through the supply chain obligations the requirements also reach suppliers that are not directly regulated. The fastest way to orient yourself is the <a href=\"#sgnis2-betroffenheit\" style=\"color:var(--teal);font-weight:700;\">scope check<\/a> at the top of this page.<\/div><\/div>\r\n    <\/div>\r\n    <div class=\"q-item\">\r\n      <button class=\"q-btn\" type=\"button\" aria-expanded=\"false\"><span class=\"qt\">What are the reporting obligations for a security incident?<\/span><span class=\"qi\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 5v14M5 12h14\"\/><\/svg><\/span><\/button>\r\n      <div class=\"q-panel\"><div class=\"q-a\">Significant incidents must be reported in three stages (Art. 23): an <b>early warning within 24 hours<\/b>, a detailed notification within 72 hours and a final report no later than one month after the early warning. On the SwissGRC\u00ae Platform you define the reporting process as a workflow with deadlines, owners and templates, so that when it happens, nobody has to figure out who reports what by when.<\/div><\/div>\r\n    <\/div>\r\n    <div class=\"q-item\">\r\n      <button class=\"q-btn\" type=\"button\" aria-expanded=\"false\"><span class=\"qt\">How quickly can we get started?<\/span><span class=\"qi\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 5v14M5 12h14\"\/><\/svg><\/span><\/button>\r\n      <div class=\"q-panel\"><div class=\"q-a\">Faster than most expect. The SwissGRC\u00ae Platform comes with <b>pre-structured NIS2 content<\/b>, so you are not starting from zero. First results such as the baseline assessment and a prioritised action plan are visible within days, and a typical rollout takes a few weeks depending on scope and modules. Our onboarding guides you step by step.<\/div><\/div>\r\n    <\/div>\r\n    <div class=\"q-item\">\r\n      <button class=\"q-btn\" type=\"button\" aria-expanded=\"false\"><span class=\"qt\">How do evidence and the audit trail work?<\/span><span class=\"qi\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 5v14M5 12h14\"\/><\/svg><\/span><\/button>\r\n      <div class=\"q-panel\"><div class=\"q-a\">Evidence is attached <b>directly to the requirement or measure<\/b>: documents, minutes, screenshots, references. Every version is preserved, and every change is logged with user and timestamp. The result is a complete, audit-proof trail. When the supervisory authority or an auditor requests evidence, you export the current state at the click of a button instead of searching folders and inboxes.<\/div><\/div>\r\n    <\/div>\r\n    <div class=\"q-item\">\r\n      <button class=\"q-btn\" type=\"button\" aria-expanded=\"false\"><span class=\"qt\">What does it cost?<\/span><span class=\"qi\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 5v14M5 12h14\"\/><\/svg><\/span><\/button>\r\n      <div class=\"q-panel\"><div class=\"q-a\">Licensing is <b>modular and transparent<\/b>: you pay for the modules you use, scaled to the size of your organisation. There are no hidden costs and no obligation to buy the full suite. Because the right setup differs by starting point, we prepare a concrete quote after a short conversation. <a href=\"\/en\/sales\/\" style=\"color:var(--teal);font-weight:700;\">Contact sales<\/a><\/div><\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <p class=\"q-more\">For the directive itself, including sectors, sanctions and deadlines, see the <a href=\"#sgnis2-betroffenheit\">scope check<\/a> and the <a href=\"#sgnis2-fristen\">roadmap<\/a> above.<\/p>\r\n<\/div>\r\n\r\n<script type=\"application\/ld+json\">\r\n{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Who is affected by NIS2?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"In principle, medium and large companies with 50 or more employees or over EUR 10 million turnover in the 18 sectors of Annexes I and II of the directive. Certain services such as DNS, TLD or trust services are covered regardless of size, and the requirements also reach suppliers through supply chain obligations.\"}},{\"@type\":\"Question\",\"name\":\"What are the reporting obligations for a security incident?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Significant security incidents must be reported in three stages: an early warning within 24 hours, a detailed notification within 72 hours and a final report no later than one month after the early warning (Art. 23 NIS2).\"}},{\"@type\":\"Question\",\"name\":\"How quickly can we get started with the NIS2 software?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The SwissGRC\u00ae Platform comes with pre-structured NIS2 content. First results such as a baseline assessment and a prioritised action plan are visible within days, and a typical rollout takes a few weeks depending on scope.\"}},{\"@type\":\"Question\",\"name\":\"How do evidence and the audit trail work?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Evidence is attached directly to requirements and measures, versioned and logged with user and timestamp. This creates a complete, audit-proof trail that can be exported for audits at the click of a button.\"}},{\"@type\":\"Question\",\"name\":\"What does the NIS2 software cost?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Licensing is modular and transparent: you only pay for the modules you use, scaled to the size of your organisation. A concrete quote is prepared after a short conversation.\"}}]}\r\n<\/script>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgnis2-faq');if(!root)return;if(root.getAttribute('data-sgn2-init'))return;root.setAttribute('data-sgn2-init','1');\r\n  root.querySelectorAll('.q-item').forEach(function(item){\r\n    var btn=item.querySelector('.q-btn'),panel=item.querySelector('.q-panel');\r\n    btn.addEventListener('click',function(){\r\n      var open=item.classList.contains('open');\r\n      root.querySelectorAll('.q-item.open').forEach(function(o){\r\n        o.classList.remove('open');\r\n        o.querySelector('.q-panel').style.maxHeight='0';\r\n        o.querySelector('.q-btn').setAttribute('aria-expanded','false');\r\n      });\r\n      if(!open){\r\n        item.classList.add('open');\r\n        panel.style.maxHeight=panel.scrollHeight+'px';\r\n        btn.setAttribute('aria-expanded','true');\r\n      }\r\n    });\r\n  });\r\n  window.addEventListener('resize',function(){\r\n    root.querySelectorAll('.q-item.open .q-panel').forEach(function(p){p.style.maxHeight=p.scrollHeight+'px';});\r\n  });\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cc2ac35 e-con-full e-flex e-con e-parent\" data-id=\"cc2ac35\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e5f5072 elementor-widget elementor-widget-html\" data-id=\"e5f5072\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Anek+Latin:wght@500;600;700;800&family=Inter:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\r\n<div class=\"sgnis2\" id=\"sgnis2-cta\">\r\n<style>\r\n#sgnis2-cta{scroll-margin-top:96px;--navy:#1A2E4C;--blue:#3062a5;--teal:#17a2ac;--teal2:#2dc6cb;--mint:#00bfad;--magenta:#B82850;\r\n  font-family:'Inter',sans-serif;position:relative;overflow:hidden;\r\n  background:linear-gradient(160deg,#14243d 0%,var(--navy) 55%,#1c3557 100%);color:#fff;}\r\n#sgnis2-cta *{box-sizing:border-box;margin:0;padding:0;}\r\n#sgnis2-cta .c-grid{position:absolute;inset:0;pointer-events:none;\r\n  background-image:linear-gradient(rgba(255,255,255,.035) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.035) 1px,transparent 1px);\r\n  background-size:44px 44px;\r\n  -webkit-mask-image:radial-gradient(ellipse 70% 90% at 50% 40%,#000 30%,transparent 78%);\r\n  mask-image:radial-gradient(ellipse 70% 90% at 50% 40%,#000 30%,transparent 78%);}\r\n#sgnis2-cta .c-glow{position:absolute;pointer-events:none;border-radius:50%;filter:blur(90px);}\r\n#sgnis2-cta .c-glow.g1{width:480px;height:480px;top:-220px;left:-140px;background:rgba(45,198,203,.14);}\r\n#sgnis2-cta .c-glow.g2{width:420px;height:420px;bottom:-220px;right:-120px;background:rgba(48,98,165,.20);}\r\n#sgnis2-cta .c-wrap{position:relative;max-width:900px;margin:0 auto;padding:96px 32px;text-align:center;}\r\n#sgnis2-cta h2{margin-top:0;font-family:'Anek Latin',sans-serif;font-weight:800;font-size:clamp(30px,4.2vw,52px);line-height:1.1;margin:22px 0 18px;letter-spacing:-.01em;}\r\n#sgnis2-cta h2 .hl{background:linear-gradient(90deg,var(--teal2),var(--mint));-webkit-background-clip:text;background-clip:text;color:transparent;}\r\n#sgnis2-cta .c-sub{font-size:17.5px;line-height:1.65;color:rgba(255,255,255,.82);max-width:640px;margin:0 auto 38px;}\r\n#sgnis2-cta .c-btns{display:flex;gap:14px;justify-content:center;flex-wrap:wrap;}\r\n#sgnis2-cta .c-btn{display:inline-flex;align-items:center;gap:10px;font-family:'Anek Latin',sans-serif;font-weight:700;font-size:16.5px;\r\n  padding:16px 30px;border-radius:12px;text-decoration:none;transition:transform .18s,box-shadow .18s,background .18s;}\r\n#sgnis2-cta .c-btn.primary{background:linear-gradient(90deg,var(--teal),var(--mint));color:#fff;box-shadow:0 14px 36px rgba(0,191,173,.28);}\r\n#sgnis2-cta .c-btn.primary:hover{transform:translateY(-2px);box-shadow:0 20px 44px rgba(0,191,173,.38);}\r\n#sgnis2-cta .c-btn.ghost{background:rgba(255,255,255,.06);color:#fff;border:1px solid rgba(255,255,255,.28);}\r\n#sgnis2-cta .c-btn.ghost:hover{background:rgba(255,255,255,.12);transform:translateY(-2px);}\r\n@media (prefers-reduced-motion:reduce){#sgnis2-cta .c-btn{transition:none;}}\r\n@media (max-width:640px){\r\n  #sgnis2-cta .c-wrap{padding:70px 20px;}\r\n  #sgnis2-cta .c-sub{font-size:15.5px;}\r\n  #sgnis2-cta .c-btns{flex-direction:column;align-items:stretch;}\r\n  #sgnis2-cta .c-btn{justify-content:center;}\r\n}\r\n<\/style>\r\n\r\n<div class=\"c-grid\"><\/div>\r\n<div class=\"c-glow g1\"><\/div>\r\n<div class=\"c-glow g2\"><\/div>\r\n\r\n<div class=\"c-wrap\">\r\n  <h2>Do not just implement NIS2.<br><span class=\"hl\">Prove it.<\/span><\/h2>\r\n  <p class=\"c-sub\">See how organisations across Europe structure, implement and evidence their NIS2 obligations with the SwissGRC\u00ae Platform, ready for authorities and auditors.<\/p>\r\n  <div class=\"c-btns\">\r\n    <a class=\"c-btn primary\" href=\"\/en\/demo\/\">Request a demo<\/a>\r\n    <a class=\"c-btn ghost\" href=\"\/en\/sales\/\">Contact sales<\/a>\r\n  <\/div>\r\n<\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>EU Directive 2022\/2555 &middot; NIS2 NIS2 compliance you can prove. From scoping analysis to the ten minimum measures to reporting to your supervisory authority: the SwissGRC\u00ae Platform makes your NIS2 implementation structured, traceable and audit ready. Check if you are affected Request a demo Scope check Does NIS2 apply to your organisation? Three inputs are [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","footnotes":"","_links_to":"","_links_to_target":""},"class_list":["post-45699","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Network &amp; Information Security Directive (NIS2)\" \/>\n\t\t<meta property=\"og:description\" content=\"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-06-18T17:14:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-14T07:55:32+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Network &amp; Information Security Directive (NIS2)\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#listItem\",\"name\":\"Network &#038; Information Security Directive (NIS2)\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#listItem\",\"position\":2,\"name\":\"Network &#038; Information Security Directive (NIS2)\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/\",\"name\":\"Network & Information Security Directive (NIS2)\",\"description\":\"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network & Information Security Directive.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/network-information-security-directive-nis2\\\/#breadcrumblist\"},\"datePublished\":\"2024-06-18T19:14:09+02:00\",\"dateModified\":\"2026-07-14T09:55:32+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Network &amp; Information Security Directive (NIS2)<\/title>\n\n","aioseo_head_json":{"title":"Network & Information Security Directive (NIS2)","description":"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network & Information Security Directive.","canonical_url":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#listItem","name":"Network &#038; Information Security Directive (NIS2)"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#listItem","position":2,"name":"Network &#038; Information Security Directive (NIS2)","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/en\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/en\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#webpage","url":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/","name":"Network & Information Security Directive (NIS2)","description":"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network & Information Security Directive.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/#breadcrumblist"},"datePublished":"2024-06-18T19:14:09+02:00","dateModified":"2026-07-14T09:55:32+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/en\/#website","url":"https:\/\/swissgrc.com\/en\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"en-GB","publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Swiss GRC | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"Network &amp; Information Security Directive (NIS2)","og:description":"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.","og:url":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/","og:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg","og:image:secure_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg","article:published_time":"2024-06-18T17:14:09+00:00","article:modified_time":"2026-07-14T07:55:32+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"Network &amp; Information Security Directive (NIS2)","twitter:description":"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"6 minutes"},"aioseo_meta_data":{"post_id":"45699","title":"Network &amp; Information Security Directive (NIS2)","description":"Ensure compliance with NIS2: Strengthen cybersecurity, protect critical infrastructure, and mitigate threats under the Network &amp; Information Security Directive.","keywords":null,"keyphrases":{"focus":{"keyphrase":"Network & Information Security Directive","score":69},"additional":[{"keyphrase":"NIS2","score":89}]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"custom_image","og_image_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg","og_image_width":"0","og_image_height":"0","og_image_custom_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/NIS2-Swiss-GRC-scaled.jpg","og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-07-14 07:55:53","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":"{\"title\":{\"suggestions\":[],\"usage\":0},\"description\":{\"suggestions\":[],\"usage\":0}}","ai":null,"created":"2024-06-18 15:46:04","updated":"2026-09-01 13:53:04","focus_keyword":"Network & Information Security Directive","additional_keywords":[{"word":"NIS2","score":89,"items":{"introductionKeyword":{"score":9},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":9},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tNetwork &amp; Information Security Directive (NIS2)\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/en\/"},{"label":"Network &#038; Information Security Directive (NIS2)","link":"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/comments?post=45699"}],"version-history":[{"count":43,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45699\/revisions"}],"predecessor-version":[{"id":69525,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45699\/revisions\/69525"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media?parent=45699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}