{"id":74367,"date":"2025-10-25T20:58:35","date_gmt":"2025-10-25T20:58:35","guid":{"rendered":"https:\/\/complior.se\/?page_id=74367"},"modified":"2026-01-20T04:14:07","modified_gmt":"2026-01-20T03:14:07","slug":"nis2","status":"publish","type":"page","link":"https:\/\/complior.se\/en\/compliance\/nis2\/","title":{"rendered":"NIS2"},"content":{"rendered":"
<\/span>
\n
\n
\n
\n

NIS2<\/h1>\n\n\n\n
\n

Regulations for increased cyber security within the EU<\/strong><\/p>\n<\/div>\n\n\n\n

EU har inf\u00f6rt det nya cybers\u00e4kerhetsdirektivet NIS2 f\u00f6r att st\u00e4rka motst\u00e5ndskraften mot cyberattacker och digitala s\u00e5rbarheter. Direktivet g\u00e4ller fr\u00e5n 16 januari 2023 och ska vara inf\u00f6rt i medlemsl\u00e4ndernas lagstiftning senast 18 oktober 2024. NIS2 ers\u00e4tter det tidigare NIS-direktivet fr\u00e5n 2016 och inneb\u00e4r ut\u00f6kade krav, fler omfattade sektorer och tydligare samarbete mellan medlemsl\u00e4nder.<\/p>\n<\/div>\n\n\n\n

\n
Contact us<\/div><\/path><\/svg><\/span><\/a><\/div><\/div>\n<\/div><\/div>\n<\/div>\n\n\n\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n
\n

What is NIS2?<\/h2>\n\n\n\n

NIS2 (Network and Information Security Directive) is the EU's updated framework for improving the security of networks and information systems in critical sectors. The directive expands the scope compared to the original NIS directive and places higher demands on both public and private actors in a range of sectors, including energy, transport, finance, health and digital infrastructure. NIS2's goal is to improve the ability of these actors to prevent, detect and manage cyber threats and security incidents, thereby protecting the EU's economic and social interests.<\/p>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n

Basic provisions<\/h2>\n<\/div>\n\n\n\n
\n
\n

Extended application<\/h3>\n\n\n\n

NIS2 t\u00e4cker fler sektorer och akt\u00f6rer \u00e4n tidigare. F\u00f6rutom att inkludera traditionellt kritiska omr\u00e5den som energi och transport, omfattar NIS2 \u00e4ven sektorer som offentliga f\u00f6rvaltningar, rymdindustri och elektroniska kommunikationstj\u00e4nster. Direktivet delar upp f\u00f6retag i tv\u00e5 kategorier: \u201dv\u00e4sentliga enheter\u201d och \u201dviktiga enheter\u201d, d\u00e4r kraven varierar beroende p\u00e5 vilken kategori akt\u00f6ren tillh\u00f6r. V\u00e4sentliga enheter, som exempelvis energileverant\u00f6rer, st\u00e5r under striktare tillsyn \u00e4n viktiga enheter, men alla m\u00e5ste f\u00f6lja samma grundl\u00e4ggande s\u00e4kerhetskrav.<\/p>\n<\/div>\n\n\n\n

\n

Requirements for risk management and incident management<\/h3>\n\n\n\n

As with its predecessor NIS, NIS2 requires all covered actors to implement comprehensive security measures to manage risks associated with their network and information systems. Actors must establish processes to identify and manage potential cyber threats and ensure that their systems and data are protected. Incident management is a central part of NIS2, where all actors must be able to detect, report and remedy security incidents within strict time frames.<\/p>\n<\/div>\n\n\n\n

\n

Reporting of incidents<\/h3>\n\n\n\n

An important change in NIS2 is the stricter reporting obligation for cyber incidents. Entities must report major security incidents to the relevant authorities within 24 hours of discovery of the incident. This is a significant reinforcement compared to previous requirements and means that faster action can be taken to limit the damage from incidents and the spillover effect within the Union.<\/p>\n<\/div>\n\n\n\n

\n

Supervision and Sanctions<\/h3>\n\n\n\n

Under NIS2, member states' responsibilities for supervision and compliance are expanded. Authorities within each country are empowered to carry out inspections and issue administrative sanctions to ensure that companies comply with their obligations. The penalties for non-compliance can be significant, with fines of up to \u20ac10 million or 2% of global annual turnover for companies that fail to live up to the requirements.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\n

Riskhantering och s\u00e4kerhetskontroller enligt NIS2<\/h2>\n<\/div>\n\n\n\n
\n
\n

Risk management system<\/h3>\n\n\n\n

Every organization covered by NIS2 must develop and implement a comprehensive risk management system for its network and information systems. This includes identifying critical assets and functions and ensuring that their protection is adequate. The requirement also means that the actors must continuously monitor and update their systems to deal with new threats.<\/p>\n<\/div>\n\n\n\n

\n

Regular security tests<\/h3>\n\n\n\n

A central part of NIS2 is that actors regularly carry out security tests and vulnerability analyzes of their systems. This includes penetration testing that simulates real cyber attacks to identify and fix weaknesses before they can be exploited by malicious actors.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n

Dataskydd och krypteringskrav i NIS2<\/h2>\n<\/div>\n\n\n\n
\n
\n

Encryption and data management<\/h3>\n\n\n\n

NIS2 places great emphasis on protecting data through encryption and other data protection measures. Sensitive data must be encrypted both at rest and in transit, ensuring that even if the data is stolen, it cannot be used without the proper decryption keys. Companies must also implement strong authentication mechanisms, such as multi-factor authentication (MFA), to protect their systems from unauthorized access.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\"Document<\/figure>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n
\n

Impact on companies and organizations<\/h2>\n\n\n\n

NIS2 inneb\u00e4r en betydande f\u00f6r\u00e4ndring f\u00f6r m\u00e5nga f\u00f6retag och organisationer inom EU. F\u00f6rutom att fler sektorer nu omfattas av reglerna, st\u00e4lls h\u00f6gre krav p\u00e5 riskhantering, incidenthantering och s\u00e4kerhetstester. F\u00f6retag som inte tidigare omfattades av NIS m\u00e5ste nu bygga upp strukturer och rutiner f\u00f6r att s\u00e4kerst\u00e4lla att de uppfyller de nya kraven. Detta kan inneb\u00e4ra investeringar i ny teknik, s\u00e4kerhetspersonal och utbildning. Tredjepartsleverant\u00f6rer som erbjuder kritiska tj\u00e4nster till f\u00f6retag inom EU m\u00e5ste ocks\u00e5 f\u00f6lja NIS2:s s\u00e4kerhetsstandarder, vilket inneb\u00e4r att f\u00f6retag m\u00e5ste se \u00f6ver sina leverant\u00f6rsavtal f\u00f6r att s\u00e4kerst\u00e4lla att de externa akt\u00f6rerna uppr\u00e4tth\u00e5ller samma h\u00f6ga s\u00e4kerhetsniv\u00e5er som de sj\u00e4lva.<\/p>\n<\/div>\n\n\n\n

\n

Collaboration and Information Sharing<\/h3>\n\n\n\n

Every organization covered by NIS2 must develop and implement a comprehensive risk management system for its network and information systems. This includes identifying critical assets and functions and ensuring that their protection is adequate. The requirement also means that the actors must continuously monitor and update their systems to deal with new threats.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Vad \u00e4r NIS2? NIS2 (Network and Information Security Directive) \u00e4r EU:s uppdaterade ramverk f\u00f6r att f\u00f6rb\u00e4ttra s\u00e4kerheten f\u00f6r n\u00e4tverk och informationssystem inom kritiska sektorer. Direktivet ut\u00f6kar omfattningen j\u00e4mf\u00f6rt med det ursprungliga NIS-direktivet och st\u00e4ller h\u00f6gre krav p\u00e5 b\u00e5de offentliga och privata akt\u00f6rer i en rad sektorer, inklusive energi, transport, finans, h\u00e4lsa och digital infrastruktur. NIS2:s […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":74361,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"blank","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_eb_attr":"","inline_featured_image":false,"_uag_custom_page_level_css":"","wpm_timeformat":"","_wpm_styles":"","footnotes":""},"class_list":["post-74367","page","type-page","status-publish","hentry"],"yoast_head":"\nNIS2 - Complior<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/complior.se\/en\/compliance\/nis2\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 - Complior\" \/>\n<meta property=\"og:description\" content=\"Vad \u00e4r NIS2? NIS2 (Network and Information Security Directive) \u00e4r EU:s uppdaterade ramverk f\u00f6r att f\u00f6rb\u00e4ttra s\u00e4kerheten f\u00f6r n\u00e4tverk och informationssystem inom kritiska sektorer. Direktivet ut\u00f6kar omfattningen j\u00e4mf\u00f6rt med det ursprungliga NIS-direktivet och st\u00e4ller h\u00f6gre krav p\u00e5 b\u00e5de offentliga och privata akt\u00f6rer i en rad sektorer, inklusive energi, transport, finans, h\u00e4lsa och digital infrastruktur. NIS2:s […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/complior.se\/en\/compliance\/nis2\/\" \/>\n<meta property=\"og:site_name\" content=\"Complior\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-20T03:14:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/NIS2Image.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1110\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/\",\"name\":\"NIS2 - Complior\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/NIS2Image.webp\",\"datePublished\":\"2025-10-25T20:58:35+00:00\",\"dateModified\":\"2026-01-20T03:14:07+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/NIS2Image.webp\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/NIS2Image.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/nis2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/complior.se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Compliance\",\"item\":\"https:\\\/\\\/complior.se\\\/compliance\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"NIS2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/complior.se\\\/#website\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"name\":\"Complior\",\"description\":\"Security beyond compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/complior.se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\",\"name\":\"Complior\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"width\":2560,\"height\":960,\"caption\":\"Complior\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 - Complior","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/complior.se\/en\/compliance\/nis2\/","og_locale":"en_GB","og_type":"article","og_title":"NIS2 - Complior","og_description":"Vad \u00e4r NIS2? NIS2 (Network and Information Security Directive) \u00e4r EU:s uppdaterade ramverk f\u00f6r att f\u00f6rb\u00e4ttra s\u00e4kerheten f\u00f6r n\u00e4tverk och informationssystem inom kritiska sektorer. Direktivet ut\u00f6kar omfattningen j\u00e4mf\u00f6rt med det ursprungliga NIS-direktivet och st\u00e4ller h\u00f6gre krav p\u00e5 b\u00e5de offentliga och privata akt\u00f6rer i en rad sektorer, inklusive energi, transport, finans, h\u00e4lsa och digital infrastruktur. NIS2:s […]","og_url":"https:\/\/complior.se\/en\/compliance\/nis2\/","og_site_name":"Complior","article_modified_time":"2026-01-20T03:14:07+00:00","og_image":[{"width":1110,"height":630,"url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/NIS2Image.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/complior.se\/compliance\/nis2\/","url":"https:\/\/complior.se\/compliance\/nis2\/","name":"NIS2 - Complior","isPartOf":{"@id":"https:\/\/complior.se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/complior.se\/compliance\/nis2\/#primaryimage"},"image":{"@id":"https:\/\/complior.se\/compliance\/nis2\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/NIS2Image.webp","datePublished":"2025-10-25T20:58:35+00:00","dateModified":"2026-01-20T03:14:07+00:00","breadcrumb":{"@id":"https:\/\/complior.se\/compliance\/nis2\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/complior.se\/compliance\/nis2\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/compliance\/nis2\/#primaryimage","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/NIS2Image.webp","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/NIS2Image.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/complior.se\/compliance\/nis2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/complior.se\/"},{"@type":"ListItem","position":2,"name":"Compliance","item":"https:\/\/complior.se\/compliance\/"},{"@type":"ListItem","position":3,"name":"NIS2"}]},{"@type":"WebSite","@id":"https:\/\/complior.se\/#website","url":"https:\/\/complior.se\/","name":"Complior","description":"Security beyond compliance","publisher":{"@id":"https:\/\/complior.se\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/complior.se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/complior.se\/#organization","name":"Complior","url":"https:\/\/complior.se\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","width":2560,"height":960,"caption":"Complior"},"image":{"@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/"}}]}},"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"trp-custom-language-flag":false},"uagb_author_info":{"display_name":"Johan Challita","author_link":"https:\/\/complior.se\/en\/author\/johan-challita\/"},"uagb_comment_info":0,"uagb_excerpt":"Vad \u00e4r NIS2? NIS2 (Network and Information Security Directive) \u00e4r EU:s uppdaterade ramverk f\u00f6r att f\u00f6rb\u00e4ttra s\u00e4kerheten f\u00f6r n\u00e4tverk och informationssystem inom kritiska sektorer. Direktivet ut\u00f6kar omfattningen j\u00e4mf\u00f6rt med det ursprungliga NIS-direktivet och st\u00e4ller h\u00f6gre krav p\u00e5 b\u00e5de offentliga och privata akt\u00f6rer i en rad sektorer, inklusive energi, transport, finans, h\u00e4lsa och digital infrastruktur. NIS2:s…","_links":{"self":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/comments?post=74367"}],"version-history":[{"count":95,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74367\/revisions"}],"predecessor-version":[{"id":79269,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74367\/revisions\/79269"}],"up":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74361"}],"wp:attachment":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media?parent=74367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}