From Regulation to Reality: Navigating NIS2 with Confidence

The Dutch Cybersecurity Act (‘Cyberbeveiligingswet’) is now in force, turning NIS2 from a future obligation into a present-day reality. While most organisations have started preparing, questions remain around what compliance means in practice. What exactly are boards and management teams expected to do, especially within (multinational) group structures? What are your obligations in case of a cyber incident? What is your responsibility for managing cybersecurity risk in the supply chain? What are the consequences for director liability? And how can you turn regulatory requirements into practical measures that actually improve resilience?

NIS2 requires organisations to navigate legal, governance, operational, and technical challenges. To address these challenges, CMS and KPMG are combining their legal and technical expertise to offer a complete perspective on NIS2 implementation in an interactive webinar on Thursday, 17 September from 11:00-12:00. Combining our legal and technical expertise, we will share practical experiences, lessons learned, and insights from organisations currently implementing NIS2, while also considering connections with other new cybersecurity legislation, such as the Cyber Resilience Act. Whether you sit on a board, lead an implementation programme, or advise on compliance, this session will offer actionable takeaways tailored to your role.

Questions we will address — with time for your own questions during the Q&A:

• When and how are you required to report a cyber incident to authorities?
• How much responsibility do you have for your suppliers' cyber security?
• How does NIS2 apply within a company group structure?
• What does 'being in control' actually mean for boards and executives under NIS2?
• What are the implications of NIS2 for directors' liability?
• What are the most common mistakes (or lessons learned) organisations are making as they implement NIS2?

Speakers

• Wout Olieslagers (Counsel, CMS)
• Fietje van den Berg (Advocaat, CMS)
• Ronald Heil (Partner KPMG Cyber & TechLaw)
• Meret Keeris (Manager KPMG Cyber & TechLaw)