Nis2

If you're dealing with EU NIS2 compliance, this walks you through entity classification (essential vs important), the 10 Article 21 risk management measures, and those strict incident reporting windows (24 hours, 72 hours, one month). It handles gap assessments, maps controls to ISO 27001, and calculates penalty exposure (up to €10M or 2% of turnover for essential entities). The transposition deadline was October 2024, so if you're a medium-plus org in energy, transport, health, digital infrastructure, or the other Annex I/II sectors, this helps you figure out what you actually need to implement and draft the policies to prove it. Useful for understanding the governance obligations that now land on management bodies too.