• Risk management (34%)
• Recruitment (30%)
• Crisis management (29%)
• Emergency reserves (25%)

And although companies have already cut their IT budgets over the past two years, additional funds have been allocated to comply with NIS2, according to 68% of those surveyed. This limitation may also explain why 80% of IT budgets are now allotted to cybersecurity and compliance, according to Veeam.

“Maintaining security and compliance is vital for any organization, but the fact that it currently consumes most of the IT budget highlights how underprepared and under-resourced organizations are,” commented Andre Troskie, Field CISO EMEA at Veeam, in a release.

“NIS2 shouldn’t be treated as a crisis, yet one in four businesses appears to view it that way,” added his colleague Edwin Weijdema, Field CTO EMEA at Veeam, in the release.