NIS2 - what?

Protect your startup: Discover how NIS2 can impact your business and what you need to consider now. Read the free white paper now!

Author
Dr. Kilian Schmidt
Datum
2.3.2025
Updated
7.3.2025

NIS2 & Cybersecurity: What Your Startup Needs to Know

The new NIS2 Directive introduces stricter cybersecurity requirements across the EU, impacting far more businesses than before. Many startups and mid-sized companies now face new obligations, which should not be overlooked. Companies that take early action can mitigate legal risks and strengthen their cybersecurity posture in the long term.

Does NIS2 Apply to Your Business?

The NIS2 Directive applies to critical and important entities across a wide range of industries, including:

  • IT service providers and cloud platforms
  • Financial institutions and insurance companies
  • Healthcare and medical technology
  • Digital infrastructure and telecommunications
  • Energy, water, and transportation sectors
  • Companies within critical supply chains

Even startups and suppliers indirectly involved in essential services may fall under the new regulations.

What Are the Key Requirements?

By October 17, 2024, affected businesses must implement a series of cybersecurity measures to comply with NIS2, including:

1. Risk Management and Protection of Critical Services

Companies must establish a systematic cybersecurity strategy to identify risks early and minimize vulnerabilities.

2. Mandatory Reporting of Security Incidents

Cyberattacks and security breaches must be reported to authorities within strict deadlines. Failure to comply can result in significant penalties.

3. Increased Regulatory Oversight

Regulators will have expanded powers to audit cybersecurity practices and enforce sanctions for non-compliance.

Why You Should Act Now

The EU is tightening cybersecurity standards to help businesses defend against cyberattacks, data breaches, and IT disruptions.

Companies that fail to prepare risk substantial fines and reputational damage, while those that proactively address NIS2 requirements can benefit from:

  • Stronger IT security and reduced operational risks
  • Greater trust from customers, partners, and investors
  • A competitive advantage in their industry

Get Informed and Secure Your Business

Our free whitepaper provides a comprehensive overview of NIS2 requirements along with practical guidance for startups and businesses.

Download it now to ensure your cybersecurity strategy meets the new EU standards.

Bereit, deine Compliance auf Autopilot zu setzen?

<h2 class="heading-style-h2">Download the full <span class="text-color-secondary"> Whitepaper</span> now!<span class="text-color-secondary"></span></h2>

NIS2 - what?

<h2 class="heading-style-h2">Download the full <span class="text-color-secondary"> Whitepaper</span> now!<span class="text-color-secondary"></span></h2>

NIS2 - what?

Thomas Gan
Co-Founder, MuffinTech

“Fast, straightforward, and seamlessly automated!”

It's incredible how effortlessly the Kertos team guided us through the complex ISO 27001 process. Fast, straightforward, and seamlessly automated! Compliance is no longer on our minds because Kertos takes care of everything.

Dr Kilian Schmidt

CEO & Co-Founder, Kertos GmbH

Dr. Kilian Schmidt developed a strong interest in legal processes early on. After studying law, he began his career as Senior Legal Counsel and Data Protection Officer at the Home24 Group. After working at Freshfields Bruckhaus Deringer, he moved to TIER Mobility where, as General Counsel, he played a key role in expanding the legal and public policy department - and growing the company from one to 65 cities and from 50 to 800 employees. Motivated by the limited technological advances in the legal sector and inspired by his advisory work at Gorillas Technologies, he co-founded Kertos to develop the next generation of European data protection technology.

Über Kertos

Kertos is the modern backbone of data protection and compliance activities for scaling companies. We enable our customers to implement integral data protection and information security processes in accordance with GDPR, ISO 27001, TISAX®, SOC2 and many other standards quickly and cost-effectively through automation.

Are You Ready to Put Your Compliance on Autopilot?

CTA Image