NIS2
Articles in the NIS2 category on NIS2, CyFun and compliance.
OUG 155/2024 and Law 124/2025: Romania's NIS2 law, in brief
The NIS2 legal framework in Romania, in brief: what OUG 155/2024 regulates, what Law 124/2025 changed and which DNSC orders complete its application.
Find out where you fall: Essential or Important entity?
Classification depends on sector and size. We explain the criteria, in terms everyone can understand.
NIS2 in the public sector: which cyber security measures become mandatory for city halls?
Public administration is covered by NIS2. What obligations city halls and institutions have, why the first sanctions targeted the public sector and what to do now.
What NIS2 is and what changes for companies in Romania
The European cybersecurity directive, transposed in Romania through OUG 155/2024, extends the obligations for ensuring the cybersecurity framework to thousands of new organizations.
The NIS2 timeline, from registration to audit
Registration, risk assessment, self-assessment, implementation and audit. Here is the order of the steps.