NIS2 in Late 2026: Transposition Status, Supervisor Expectations and the Belgian Model
Two years after the NIS2 deadline, most Member States have national laws in force and supervisors have moved from awareness to verification. Here is where things stand in October 2026, with a closer look at Belgium.
One incident, four clocks: NIS2, DORA, CRA and GDPR reporting
A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.
DORA step by step for financial entities in the Benelux
A practical DORA path for banks, insurers, payment institutions and asset managers in Belgium, the Netherlands and Luxembourg, from ICT risk governance to major incident reporting.
