--- title: The NIS2 Directive is Here. What Happens Next? | daily.dev description: The NIS2 Directive's October 17, 2024 compliance deadline has passed, yet roughly 66% of European businesses remain non-compliant and most EU member states... canonical: https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The NIS2 Directive is Here. What Happens Next? | daily.dev og:description: The NIS2 Directive's October 17, 2024 compliance deadline has passed, yet roughly 66% of European businesses remain non-compliant and most EU member states... og:url: https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed og:image: https://api.daily.dev/og/posts/GbbySdbEd.png og:image:alt: The NIS2 Directive is Here. What Happens Next? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The NIS2 Directive is Here. What Happens Next? **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary The NIS2 Directive's October 17, 2024 compliance deadline has passed, yet roughly 66% of European businesses remain non-compliant and most EU member states haven't codified the standards into national law. Penalties for non-compliance range from non-monetary remedies to administrative fines up to €10 million (or 2% of annual revenue for 'Essential' entities) and even personal criminal liability for management. Organizations are urged to keep prioritizing compliance measures like access control, MFA, encryption, and incident response. Teleport positions its identity-based, credential-eliminating access platform as a way to help organizations meet these NIS2 requirements around access control, policy management, monitoring, and audit logging. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What are the penalties for non-compliance with the NIS2 Directive? Penalties range from non-monetary remedies like legally-binding instructions and forced customer notifications, to administrative fines, to criminal sanctions. Essential entities (transport, finance, energy, water, health) face fines up to €10 million or 2% of annual revenue, whichever is higher. Important entities face fines starting at up to €7 million or 1.4% of annual revenue. Management can also be held personally liable for gross negligence after an incident. _Teams tracking regulatory deadlines like NIS2 can follow related security and compliance coverage on daily.dev._ ### When did the NIS2 Directive compliance deadline pass and are companies ready? The NIS2 Directive's transposition deadline was October 17, 2024, and it has already passed. Despite this, an estimated 66% of businesses operating in Europe have not implemented the necessary compliance controls, and most EU member states have not yet codified NIS2 standards into their national laws, leaving enforcement uncertain. _daily.dev helps engineers stay current on regulatory shifts like NIS2 that affect infrastructure security work._ ### What technical measures does Article 21 of the NIS2 Directive require organizations to implement? Article 21 mandates appropriate and proportionate technical and organizational measures including access control and asset management, multi-factor and continuous authentication, cryptography and encryption, risk analysis, incident handling, business continuity planning, supply chain security, secure system development, and cyber hygiene training. _Engineers building NIS2-aligned access controls can track related security practices on daily.dev._ ## Similar posts on daily.dev - [NIS2 Compliance: Maintaining Credential Security](https://daily.dev/posts/nis2-compliance-maintaining-credential-security-yq3sa3lbj) · Security Boulevard · 0 upvotes · 0 comments - [Only 16% of Businesses are Fully Compliant with NIS2 Despite 2024 Compliance Deadline](https://daily.dev/posts/only-16-of-businesses-are-fully-compliant-with-nis2-despite-2024-compliance-deadline-mbwltdf2a) · IT Security Guru · 0 upvotes · 0 comments - [NIS2: what actually changes for companies and tech teams](https://daily.dev/posts/nis2-what-actually-changes-for-companies-and-tech-teams-lnloscayr) · Codemotion · 1 upvotes · 0 comments - [Does Your Security Programme Align With NIS2 Requirements?](https://daily.dev/posts/does-your-security-programme-align-with-nis2-requirements--bsls9geiw) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments - [Germany NIS-2 Implementation Act Strengthens Cybersecurity](https://daily.dev/posts/germany-nis-2-implementation-act-strengthens-cybersecurity-pk8vktqcn) · Cyble · 0 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#cyber](https://daily.dev/tags/cyber), [#compliance](https://daily.dev/tags/compliance) [View this post on daily.dev](https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The NIS2 Directive is Here. What Happens Next?","url":"https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed"},"datePublished":"2026-08-23T12:22:49.825Z","dateModified":"2026-08-23T12:50:26.480Z","description":"The NIS2 Directive's October 17, 2024 compliance deadline has passed, yet roughly 66% of European businesses remain non-compliant and most EU member states...","image":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","thumbnailUrl":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,cyber,compliance","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"The NIS2 Directive is Here. What Happens Next?"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/the-nis2-directive-is-here-what-happens-next--gbbysdbed#faq","mainEntity":[{"@type":"Question","name":"What are the penalties for non-compliance with the NIS2 Directive?","acceptedAnswer":{"@type":"Answer","text":"Penalties range from non-monetary remedies like legally-binding instructions and forced customer notifications, to administrative fines, to criminal sanctions. Essential entities (transport, finance, energy, water, health) face fines up to €10 million or 2% of annual revenue, whichever is higher. Important entities face fines starting at up to €7 million or 1.4% of annual revenue. Management can also be held personally liable for gross negligence after an incident. Teams tracking regulatory deadlines like NIS2 can follow related security and compliance coverage on daily.dev."}},{"@type":"Question","name":"When did the NIS2 Directive compliance deadline pass and are companies ready?","acceptedAnswer":{"@type":"Answer","text":"The NIS2 Directive's transposition deadline was October 17, 2024, and it has already passed. Despite this, an estimated 66% of businesses operating in Europe have not implemented the necessary compliance controls, and most EU member states have not yet codified NIS2 standards into their national laws, leaving enforcement uncertain. daily.dev helps engineers stay current on regulatory shifts like NIS2 that affect infrastructure security work."}},{"@type":"Question","name":"What technical measures does Article 21 of the NIS2 Directive require organizations to implement?","acceptedAnswer":{"@type":"Answer","text":"Article 21 mandates appropriate and proportionate technical and organizational measures including access control and asset management, multi-factor and continuous authentication, cryptography and encryption, risk analysis, incident handling, business continuity planning, supply chain security, secure system development, and cyber hygiene training. Engineers building NIS2-aligned access controls can track related security practices on daily.dev."}}]} ```