European cybersecurity risk management and reporting obligations have received a substantial facelift. The Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the EU (“NIS 2”) became effective as of October 17, 2024, replacing the “NIS 1” Directive (2016/1148). NIS 2 affects a wide variety of organizations across multiple sectors, subjecting them to strict cybersecurity risk management requirements and imposing supervisory and enforcement measures….
By: Morrison & Foerster LLP
By: Morrison & Foerster LLP