New study: Comparison of NIS2 implementation for all 27 EU Member States

The new European Cybersecurity Directive, which makes securing IT systems a cross-industry compliance obligation, had to be implemented by the European member states by October 17, 2024. The countries are taking very different approaches, as the following comparative study shows – and many of them had not yet completed their national implementation by the time this study was completed in January 2025. One of the key findings: just as there is no single way for the companies concerned to implement NIS2, there is no single way for the EU member states to implement it, although there are many similarities.