NIS2 whitepaper

What is NIS2?

The NIS2 Directive is the new European Union cybersecurity regulation. It expands the scope of NIS1 and applies to more sectors and more companies.

It obliges them to adopt cybersecurity risk management measures, have incident response plans, and notify serious incidents within 24 hours, among other requirements.

Why act now?

EU member states are required to transpose it into national law by October 17, 2024. Non-compliance can result in fines up to €10 million or 2% of annual turnover and reputational damage, with additional personal liability for company management in some cases.

You can anticipate risks, improve security, and efficiently allocate resources to achieve compliance by acting early!

How do we do it?

We guide you through the process.

A developer sketching a diagram on a whiteboard while a colleague looks on, laptops on the desk in front

We do the work, you progress

More than just guidance, we accompany you throughout the process to turn the directive into a competitive advantage and strengthen your cybersecurity efficiently:

  • Formation and training We raise awareness among your teams with workshops, programs, and ongoing training tailored to your sector and role. We help establish a culture of cybersecurity that protects your company.

  • Comprehensive compliance We help you implement everything required by the directive through an action plan adapted to your needs. From risk analysis and incident response procedures to supply chain security policies, access control, and secure communication. All aligned with ISO standards and best practices.

  • Ongoing support We stay by your side to guide you through changes and decisions. We ensure that compliance is not a one-off but an integral part of your company's DNA.

Related articles

Read more about NIS2 and security

NIS2 and GDPR

Are you prepared for NIS2?

The new European directive is coming into full effect, and we wanted to be prepared for it so we can help you.

Read full article: Are you prepared for NIS2?
Iso 27001

On the path to ISO 27001 certification

MarsBased is pursuing ISO 27001 certification. Our security practices were already robust — this formalises and validates our commitment to data protection.

Read full article: On the path to ISO 27001 certification
React

React vulnerability (CVE-2025-66478): How we responded and what you should do

A critical React SSR vulnerability (CVE-2025-66478, CVSS 10.0) allows remote code execution. We have swiftly patched all active React/Next.js client projects. Users must apply the official fix immediately.

Read full article: React vulnerability (CVE-2025-66478): How we responded and what you should do
Work with us

Let's work together

Let's analyse how to adapt your organisation to NIS2 without putting your business at risk.

Schedule a call