NIS2 (Network and Information Security Directive 2) is the EU's cybersecurity legislation designed to improve the resilience of organisations operating in critical and important sectors. Many organisations with more than 50 employees or €10 million turnover may fall within scope, particularly those operating in sectors such as healthcare, manufacturing, transport, financial services, digital infrastructure and managed service provision. This webinar will help you understand whether NIS2 applies to your organisation and what your obligations may be. 

Under the NIS2 framework, organisations classified as Essential Entities may face penalties of up to €10 million or 2% of global annual turnover, while Important Entities may face penalties of up to €7 million or 1.4% of global annual turnover. Regulators may also require remediation measures, conduct audits and increase oversight where significant compliance gaps are identified.

ISO 27001 provides a structured Information Security Management System (ISMS) that helps organisations establish governance, risk management, incident response and security controls. While ISO 27001 certification alone does not guarantee NIS2 compliance, it is widely recognised as one of the most effective frameworks for helping organisations meet many of the requirements introduced by NIS2. 

This webinar is designed for business owners, directors, CEOs, CFOs, operations leaders, compliance professionals, risk managers, IT managers and anyone responsible for governance, cybersecurity or regulatory compliance within their organisation. The session focuses on both the business and technical implications of NIS2 and ISO 27001.

Organisations should begin by determining whether they are likely to fall within the scope of NIS2, conducting a cybersecurity and governance gap assessment, reviewing risk management processes, assessing supplier security arrangements and establishing clear executive oversight of cybersecurity. Implementing an ISO 27001-aligned Information Security Management System can provide a strong foundation for NIS2 readiness and long-term cyber resilience. 

Ireland is progressing the implementation of NIS2 through national legislation and guidance issued by the National Cyber Security Centre (NCSC). Although the EU implementation deadline was October 2024, organisations should not delay preparation. Regulators increasingly expect organisations to demonstrate cybersecurity governance, risk management and readiness for the requirements introduced under NIS2.

This FAQ is particularly valuable because it directly addresses one of the most common search queries currently appearing around NIS2 in Ireland:
"Is NIS2 in force in Ireland?" and "When does NIS2 come into effect in Ireland?". These are exactly the types of questions that AI search engines and Google's featured snippets often surface.