The cyber regulatory landscape in Europe went through a major
shift after both the Directive on Measures for a High Common Level
of Cybersecurity across the Union ('NIS2') and the Critical
Entities Resilience Directive ('CER') entered into force in
2023. Accordingly, Member States need to transpose both directives
into national law by 17 October 2024, while the measures will start
applying the following day.
Given this upcoming deadline, scoped organisations are now
tasked to realign and further invest in their compliance efforts,
as these regulatory developments impose more stringent
accountability and transparency reporting requirements.
Breaches are becoming more costly. According to PwC's 2024
Global Digital Trust Insights survey, 36% of the respondents have
faced $1M+ data breaches last year.
