An outage takes down digital services. Counters switch to paper, continuity is arranged, systems come back and the notification has been filed. Three months later the regulator asks: "what did that outage change in your organisation?" The answer sits scattered across inboxes, an evaluation report and board minutes. You did learn — you just cannot show it.
The same directives, your regulator
NIS2 and CER apply to essential and critical entities in this sector; supervision lies with the competent authority designated for it. The annex covers central government — ministries and independent public bodies — as well as decentralised government such as provinces, municipalities and water authorities; many are essential entities by operation of law.
Per anchor: what the directive asks, and what is ready for it.
Go to the law →One yardstick for exercise and real response, recurring threads that get followed through, and readiness from exercise and response data alike.
Go to the approach →