YTYK You think you know

NIS2 · pillar 5 of 6

Supervision and penalties

Essential entities are supervised before the fact, important ones after, and the ceilings differ.

  1. 13 Supervised before, or supervised after Essential entities are under an ex ante regime: the authority may inspect, audit and request evidence without any…
  2. 14 Two ceilings, and 'whichever is higher' Essential entities face administrative fines of up to €10,000,000 or 2% of total worldwide annual turnover, whichever…
  3. 15 Registering, and why it comes first Member States must maintain a list of essential and important entities, and entities are required to submit at least…

Start this pillar See the whole map

Sources: Directive (EU) 2022/2555 (NIS2), Belgian law of 26 April 2024 establishing a framework for the cybersecurity of networks and information systems, Centre for Cybersecurity Belgium — NIS2 and CyberFundamentals. Written from those texts and last checked on against reporting on them — not read line by line against the primary documents. Every card names the clause it comes from precisely so you can settle it at the source, and [email protected] is where a correction goes.