Cybersecurity: careless domestic firms could be sanctioned

Companies that fail to register could be sanctioned by the authorities. With NIS2 the EU’s goal is to enable member states to effectively fight the cyber threats. The rules apply to companies with 50 or more employees or annual sales above EUR 10m. “The official deadline for compulsory registration expired on 30 June, but companies that failed to register can still do so at the Supervisory Authority for Regulatory Affairs until 17 October, without any sanctions”, told said Mihály Zala, head of technology risk and cybersecurity at EY. //