NIS2 in Late 2026: Transposition Status, Supervisor Expectations and the Belgian Model
Two years after the NIS2 deadline, most Member States have national laws in force and supervisors have moved from awareness to verification. Here is where things stand in October 2026, with a closer look at Belgium.
Security logging and monitoring (SIEM, SOC, MDR) as evidence
A practical guide to security logging, SIEM and SOC or MDR services: what to log, retention, detection use cases, alert triage and how to show supervisors that detection works.
NIS2 in Belgium: a step-by-step compliance guide
A practical route through the Belgian NIS2 Law: confirm scope, register with the CCB, choose a CyFun level or ISO/IEC 27001, report incidents and pass the conformity assessment.
Cyber tabletop exercise playbook: plan, run and evidence it
A step-by-step playbook to plan, facilitate and evaluate a cyber tabletop exercise, and turn the after-action report into evidence for NIS2, DORA and CyFun.
Incident response playbook aligned to NIST SP 800-61r3 and NIS2
A practical incident response playbook built on NIST SP 800-61r3 and NIS2, with roles, a severity matrix, evidence rules and a clear path from detection to post-incident review.
