NIS2

NIS2 expands the scope of the original NIS Directive, imposing stricter cybersecurity risk-management obligations on essential and important entities. SaaS providers serving EU customers must demonstrate supply-chain security and incident response capabilities.