NIS2 is coming: how to start preparing now
The Dutch implementation of NIS2 is expected in 2026. Does it apply to you, and what can you already do today? A practical overview.
By Max HoltropThe NIS2 directive strengthens the digital resilience of organisations across Europe. At the EU level, the directive has been in force since October 2024; the Dutch implementation is expected during the course of 2026. If you wait until it takes effect, you'll be late. Getting the basics in order takes time.
Does it apply to your organisation?
In short, that's the case when you operate in a critical sector, have 50 or more employees (or €10 million in revenue/balance sheet total), or supply to organisations that fall under NIS2 themselves. So you can also be subject to it through the supply chain.
What can you already do now?
- Map out your IT environment: systems, devices, data and suppliers.
- Make sure the basics are right: secure sign-in, patch management, backups and access management.
- Document your policies and measures, so you can demonstrate compliance.
We make sure your workplace is technically in order and connect you with audit partners where needed. Read more on our NIS2 page or schedule a no-obligation advisory call.
Related services
ICT Security & NIS2
Control over your business information and demonstrable compliance, for the law and for your clients.
Read more →Keeper Password Security
Secure password management for your entire organisation: strong passwords, shared and under control.
Read more →Microsoft 365 security licenses
The right Microsoft security licenses for your organization: advice, setup and management.
Read more →Related articles
NIS2 vs ISO 27001: the difference and the overlap
NIS2 and ISO 27001 are often confused. In this article you read the difference, where they overlap and whether an ISO certification helps you to comply with NIS2.
Read more →NIS2 for accountants: what to look out for
Does your accountancy firm fall under NIS2, and what do your clients expect from you? In this article you read how NIS2 affects accountants, often via the chain, and what you can arrange now.
Read more →Backup requirements under NIS2: why Microsoft 365 alone is not enough
Does NIS2 require a backup, and does Microsoft 365 not make one itself? In this article you read what the backup requirements mean for SMEs and why you need a separate backup of your Microsoft 365 environment.
Read more →Want to spar with a specialist?
Curious what this means for your organisation? Book a no-obligation consult — we’re happy to think along.