Bharat Mistry, technical director for UK and Ireland at Trend Micro, said: “Becoming NIS2-compliant is a significant undertaking that requires a multidisciplinary approach, involving legal, technical, and management efforts. However, the investment is justified by the enhanced security posture, reduced risk of cyber incidents, and compliance with legal obligations, which can prevent costly penalties and reputation damage.”

Martin Rutterford, channel director for UK and Ireland at Check Point Software, commented: “The journey towards NIS2 compliance directly aligns with broader cybersecurity goals by fostering a culture of continuous improvement. It forces organisations to adopt more robust security postures, enhance resilience, and improve threat detection and response capabilities, all of which contribute to strengthening overall security frameworks.”

NIS2’s global impact

In the same way that GDPR has impacted global privacy practices, NIS2 is expected to effect standards and best practices for cyber resilience beyond the EU. But while GDPR’s global impact due to its focus on data privacy was massive, NIS2’s influence may be narrower and concentrated around critical sectors that are already highly regulated.