NIS2: Cyber Governance as a Boardroom Matter

Cybersecurity is no longer just an IT concern — it’s a boardroom issue. The EU’s NIS 2 Directive, now implemented in Italy through Legislative Decree No. 138/2024, makes company leaders directly responsible for managing cyber risks. Boards must oversee policies, training, and incident response, and be ready to show regulators how cyber resilience is built into their governance. With wide sector coverage and new supplier obligations, NIS 2 raises the bar for corporate accountability. For…
By: Hogan Lovells