Guide

Published: 6 August 2026. CEOs and board members rarely have time for technical details — they need a clear, short message that explains why this matters to the business, not to the IT department. The Sentence That Works NIS2 introduces minimum cybersecurity rules so that organisations important to society and the economy are more resilient … Read more

Published: 6 August 2026. Not directly. NIS2 did not originate as a copy of the American NIST framework; it is a piece of European legislation built on the same internationally accepted cybersecurity management principles. Which Standards NIS2 Is Most Often Linked To The Key Difference between a Law and a Standard The difference is simple: … Read more

Published: 6 August 2026. Yes. NIS2 is the successor to the first NIS Directive, not an entirely new law built from scratch. NIS (2016) The first European cybersecurity law — it set the basic framework, but with a limited number of covered sectors and organisations. NIS2 (2022) It extends the original law in several key … Read more

Published: 6 August 2026. No. You are obliged to assess the risks your suppliers pose — not to demand the same level of compliance from all of them. The Principle of Proportionality The more important a supplier is to your business — cloud provider, hosting, MSP, IT support — the more security measures you will … Read more

Published: 6 August 2026. Short answer: not automatically. But the situation is a little more complex in practice and depends on whether the supplier itself is covered by the law. Two Situations 1. The Supplier Itself Falls under NIS2 If the supplier is, for example, a cloud provider or telecoms operator within the scope of … Read more

Published: 6 August 2026. Many people search for “NIS2 standard” — but that is a common misunderstanding. Short answer: NIS2 is not a standard but a European directive and, in Serbia, a law. It does not prescribe mandatory application of, or certification against, ISO 27001 or any other standard. Here is what the law actually … Read more

Published: 6 August 2026. The easiest way to explain it is through an analogy with fire protection: NIS2 exists for the same reason that fire safety regulations for buildings exist. Not because every building will burn down, but because when a fire does happen, the consequences can be catastrophic. That is why the state requires … Read more

Published: 6 August 2026. NIS2 does not apply to all companies, but to organisations providing services of importance to society and the economy. If you are not sure whether this applies to your company, here is what the law specifically says. Which Sectors Are Covered Covered sectors include: How Large a Company Must Be to … Read more