NIS2 compliance
Straightforward NIS2 compliance – security your business can rely on
We help your business prepare for the requirements of the NIS2 Directive. Our experts assess your current position, identify gaps and develop the necessary measures. With practical guidance and tailored solutions, we support regulatory compliance and greater resilience against cyber threats.
Our services
Security matters. Leave it to the experts.
Information security
We provide information security officer services for public institutions and businesses alike. Our goal is to help partners not only meet their legal obligations but also establish effective, operational information security management.
Data protection
We perform data protection officer (DPO) duties in line with GDPR and applicable Hungarian law. Our expert support helps clients protect personal data, reduce risk and strengthen trust.
NIS2 readiness
We support your organisation throughout its preparation for NIS2 cybersecurity audits. Our specialists review systems, identify gaps and help implement the necessary measures.
Resilience Officer
For organisations subject to the relevant resilience legislation, appointing a resilience officer is a legal requirement. Our comprehensive service supports compliance and helps improve business continuity and organisational resilience.
Security awareness training
People can be the weakest link – or the strongest defence. Our practical security awareness programmes help employees recognise threats, avoid risks and actively protect your organisation.
TISAX versus NIS2 compliance
Automotive information security assessments do not automatically demonstrate NIS2 compliance. We help map overlapping and additional requirements to prepare for an audit.
Organisational gaps
- Policies
- Risk analysis
- Training
- Physical security
- Personnel security
- Security solutions
Phone: +36 20 313 3085
Email: info@cyberteam.hu
Important!
NIS2 milestones
30 June 2024
Registration and appointment obligations under the rules applicable at that time.
Unsure about your obligations? Contact us!
18 October 2024
EU deadline for transposition of the NIS2 Directive; Hungarian obligations are governed by national legislation.
Need help with compliance? Contact us!
31 August 2025
Deadline for concluding an audit contract for organisations subject to the relevant transitional provisions.
Need help selecting an auditor? Contact us!
30 June 2026
Deadline for the first cybersecurity audit for organisations subject to the relevant transitional provisions.
Need support with the next steps? Contact us!
Phone: +36 20 313 3085
Email: info@cyberteam.hu
Frequently asked questions
What is the NIS2 Directive?
NIS2 is an EU cybersecurity directive designed to strengthen the security of network and information systems. It seeks to make organisations in important sectors more resilient to cyberattacks and other digital threats.
Who is covered by NIS2?
The directive covers various organisations operating critical infrastructure and providing essential or important services in sectors such as energy, transport, healthcare, finance, digital infrastructure and food production. Depending on their activity and size, medium-sized and large businesses may fall within its scope. Unsure whether your organisation is affected? We can help you assess it.
When does compliance become mandatory?
EU Member States had to transpose NIS2 by October 2024. In Hungary, obligations are determined by the national cybersecurity legislation. Applicable deadlines depend on the organisation and the relevant provisions.
What does NIS2 require?
Affected organisations must take measures such as:
Reporting significant cybersecurity incidents as required by law.
Establishing cybersecurity governance
Introducing incident response procedures
Regularly assessing and reducing risk
Providing security awareness training
What happens if an organisation fails to comply?
The NIS2 framework provides for significant penalties where requirements are not met, alongside potential damage to an organisation's reputation.
Must a dedicated cybersecurity officer be appointed?
Applicable Hungarian rules may require a designated cybersecurity officer or other responsible person, depending on the organisation's status. The role can be filled internally or, where permitted, by an external specialist.
How complex is compliance?
The required measures depend on the organisation's size, activities and risk profile. Even smaller affected organisations need appropriate safeguards, while larger businesses may require a comprehensive cybersecurity management system.
Is security awareness training mandatory?
Applicable NIS2-based requirements include awareness and training measures for relevant staff and management. Training helps employees identify suspicious activity and reduce cyber risks.
How can an external partner help?
An experienced external partner:
supports implementation of the applicable NIS2 requirements
assesses the organisation's current cybersecurity maturity
develops the necessary measures
trains employees