§ 01
Definition
NIS2 replaced the 2016 NIS Directive and widened its scope to more sectors and mid-size companies. Member states had to turn it into national law by 17 October 2024, though several were late.
§ 02
How it works
Covered organisations must manage cyber risks, secure their supply chains, report significant incidents within tight deadlines and face fines for failures. Digital infrastructure such as DNS service providers, cloud and data centre services is explicitly in scope.
§ 03
Why it matters
For businesses choosing remote-access tools, NIS2 pushes toward documented security controls such as multi-factor authentication and zero-trust access, the reasons many companies are rethinking old VPN setups. Consumer VPN users are mostly affected indirectly.