NIS2 is assessed on evidence, not on intentions. A measure that is "in place" but undocumented is treated as non-compliant by the regulator. Answer according to what you could demonstrate: written policies, registers, logs, minutes, audit evidence.
Management liability (Article 20). Management bodies (executive committee, board) must approve and oversee these measures, and can be held personally liable. Fines reach EUR 10 million or 2% of global annual turnover for essential entities (EUR 7 million or 1.4% for important entities).
Get your analysis
Enter your professional details to complete your self-assessment. Our team can then send you a personalised analysis of your situation.