NIS2 in Late 2026: Transposition Status, Supervisor Expectations and the Belgian Model
Two years after the NIS2 deadline, most Member States have national laws in force and supervisors have moved from awareness to verification. Here is where things stand in October 2026, with a closer look at Belgium.
Security logging and monitoring (SIEM, SOC, MDR) as evidence
A practical guide to security logging, SIEM and SOC or MDR services: what to log, retention, detection use cases, alert triage and how to show supervisors that detection works.
Cyberbeveiligingswet (Cbw): a step-by-step compliance guide
The Cbw and the Cyberbeveiligingsbesluit have applied since 15 August 2026. This guide takes you from scoping and NCSC registration to the zorgplicht, meldplicht and board duties.
One incident, four clocks: NIS2, DORA, CRA and GDPR reporting
A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.
NIS2 in Belgium: a step-by-step compliance guide
A practical route through the Belgian NIS2 Law: confirm scope, register with the CCB, choose a CyFun level or ISO/IEC 27001, report incidents and pass the conformity assessment.
Cyber tabletop exercise playbook: plan, run and evidence it
A step-by-step playbook to plan, facilitate and evaluate a cyber tabletop exercise, and turn the after-action report into evidence for NIS2, DORA and CyFun.
NIS2 scope check: are you an essential or important entity?
A documented, step-by-step scope decision for NIS2: sector mapping, size-cap and group counting, size-independent rules, essential or important, jurisdiction, and where to register in the Benelux.
Third-party risk management in 2026: from questionnaire fatigue to continuous assurance
Supplier questionnaires are multiplying while regulators ask for more than paperwork. Here is how to rebalance third-party risk management around concentration risk, continuous monitoring and published assurance.
Incident response playbook aligned to NIST SP 800-61r3 and NIS2
A practical incident response playbook built on NIST SP 800-61r3 and NIS2, with roles, a severity matrix, evidence rules and a clear path from detection to post-incident review.
Ransomware response playbook: the first hour, 24 hours and 72 hours
A timed ransomware playbook: what to do in the first hour, the first 24 hours and the first 72 hours, from isolation and evidence to reporting, the ransom decision and a clean restore.
