NIS-2: What matters now
With Pently's free NIS-2 Assessment, find out in just a few clicks whether your company falls under NIS-2 and what you need to do to become compliant.
With Pently's free NIS-2 Assessment, find out in just a few clicks whether your company falls under NIS-2 and what you need to do to become compliant.
Previous EU cybersecurity rules (like NIS1) applied to very few companies and are no longer sufficient. Since 2025, NIS-2 has introduced significantly stricter requirements. It applies to companies considered essential or important to society, including:
Energy Logistics & Transport Manufacturing Critical Supply ChainsThe NIS-2 Directive is already in force. Many mid-sized companies are affected but don’t know it, or they underestimate how urgent the need to act is. At the same time, many other companies are unsure whether they need to do anything at all. The key priority now is to gain clarity on whether action is required—and if so, what needs to be done.
CEOs and executives are now personally responsible, and potentially personally liable. Responsibility can no longer simply be delegated to IT.
Significant cyber incidents must be reported within 24 hours. A detailed report is required within 72 hours. This can be particularly challenging for SMEs without large IT teams or on-site resources.
Companies must implement concrete technical and organizational security measures. Including access controls, encryption, backup concepts, and defined incident response processes.
NIS-2 doesn't just apply to your company, it extends to the supply chain too. Service providers and suppliers can be indirectly held accountable if they're part of critical business processes.
Violations can result in fines of up to €10 million or up to 2% of global annual revenue. For SMEs in particular, the consequences can be severe.
A free analysis of your current situation.
If required, we handle your BSI registration at no cost. So you don't have to worry about anything.
A clear, step-by-step roadmap with actionable measures to get you to compliance.
Round-the-clock monitoring from Germany, including support for reporting security incidents.
What mattered most to us was having a local contact who speaks our language and can handle all NIS-2 matters quickly and easily. We're very happy with Pently.
Michael M.
CEO
Secure your business today - with Pently as your trusted partner. As your local partner, we’re always close - and focused on keeping your business safe.
Contact us now