Tidal Control incident
NIS2 checklist: what you need to have in order to be compliant
Resolved on March 1, 2026.
The Dutch Cybersecurity Act, implementing NIS2, has applied since 15 August 2026, and supervision is active. Essential entities face fines of up to ten million euros or two percent of global turnover, and directors are personally liable. Compliance requires action across six areas: governance and management accountability, risk management, technical controls, incident detection and reporting, supply chain security, and continuous evaluation. Organisations that wait until the law is in force risk missing a thorough implementation, which takes six to twelve months.
Update timeline
- resolved Mar 01, 2026, 12:00 AM UTC
The Dutch Cybersecurity Act, implementing NIS2, has applied since 15 August 2026, and supervision is active. Essential entities face fines of up to ten million euros or two percent of global turnover, and directors are personally liable. Compliance requires action across six areas: governance and management accountability, risk management, technical controls, incident detection and reporting, supply chain security, and continuous evaluation. Organisations that wait until the law is in force risk missing a thorough implementation, which takes six to twelve months.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services