IT Governance in Critical Sectors: Towards the NIS2 Implementation

This article examines cybersecurity governance legislation in the European Union (namely, the NIS2 Directive) in comparison to similar legislation and frameworks elsewhere. Such analysis reveals several critical aspects that may reduce successful NIS2 implementation and constructive collaboration between member states once implemented. The article points out implementation risks and potential mitigation measures as well as an organizational perspective on the regulatory framework.