Cheltenham, UK – 20th November 2024 – Senior cybersecurity professionals at more than a fifth of the UK’s largest businesses are – still – “not sure” whether the EU’s NIS2 directive even applies to their organisation, new research by specialist cybersecurity consultancy Green Raven Limited has revealed. More than two-thirds of respondents at organisations with at least 1000 employees said that NIS2 does apply to them, but almost 10% of these admitted that their organisation was not compliant as of the October 17th deadline – with a further 3% not sure.
The findings contradict previous research* from June 2024, in which 97% of IT leaders at UK companies declared themselves confident that they would be, or already were, NIS2-compliant.
Morten Mjels, CEO of Green Raven Limited, said: “NIS2 came into force in January 2023 – almost two years ago – so for senior cybersecurity professionals at the companies most likely to be impacted to not know if it even...