Tidal Control incident
What is NIS2 and when does the directive apply to you
Resolved on February 24, 2026.
NIS2 is a European cybersecurity directive that applies to medium-sized and large organisations active in one of eighteen designated sectors. It requires those organisations to implement ten categories of security measures under Article 21, place board-level responsibility for cybersecurity, and report significant incidents within 24 hours. Small and micro businesses are generally outside scope, but may face NIS2 requirements indirectly as suppliers. In the Netherlands the national Cybersecurity Act has applied since 15 August 2026, adding registration in the entity register to those duties.
Update timeline
- resolved Feb 24, 2026, 12:00 AM UTC
NIS2 is a European cybersecurity directive that applies to medium-sized and large organisations active in one of eighteen designated sectors. It requires those organisations to implement ten categories of security measures under Article 21, place board-level responsibility for cybersecurity, and report significant incidents within 24 hours. Small and micro businesses are generally outside scope, but may face NIS2 requirements indirectly as suppliers. In the Netherlands the national Cybersecurity Act has applied since 15 August 2026, adding registration in the entity register to those duties.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services