<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel>
  <title>Certudo Blog (EN)</title>
  <link>https://www.certudo.com/en/blog</link>
  <description>NIS2, CyFun, DNSC</description>
  <language>en-us</language>
  <atom:link xmlns:atom="http://www.w3.org/2005/Atom" href="https://www.certudo.com/en/blog/feed.xml" rel="self" type="application/rss+xml"/>
  <item><title>DNSC registration for NIS2: steps, documents and the NIS2@RO platform</title><link>https://www.certudo.com/en/blog/inregistrare-dnsc-nis2</link><guid>https://www.certudo.com/en/blog/inregistrare-dnsc-nis2</guid><description>Who must register with DNSC, what data and documents to prepare and how to file the notification exclusively through the NIS2@RO platform.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>NIS2 fines in Romania: amounts, who is liable and how to avoid them</title><link>https://www.certudo.com/en/blog/amenzi-nis2-romania</link><guid>https://www.certudo.com/en/blog/amenzi-nis2-romania</guid><description>How large NIS2 fines can be, the essential/important difference, management liability and the first sanction applied by DNSC.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>OUG 155/2024 and Law 124/2025: Romania's NIS2 law, in brief</title><link>https://www.certudo.com/en/blog/oug-155-2024-legea-124-2025</link><guid>https://www.certudo.com/en/blog/oug-155-2024-legea-124-2025</guid><description>The NIS2 legal framework in Romania, in brief: what OUG 155/2024 regulates, what Law 124/2025 changed and which DNSC orders complete its application.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>How much NIS2 compliance costs: pre-implementation, implementation and audit</title><link>https://www.certudo.com/en/blog/cost-conformitate-nis2</link><guid>https://www.certudo.com/en/blog/cost-conformitate-nis2</guid><description>NIS2 compliance has two phases with different costs: pre-implementation (mostly free) and the implementation of controls (tools, technical consultancy, audit). Here is what makes up the budget.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>Find out where you fall: Essential or Important entity?</title><link>https://www.certudo.com/en/blog/entitate-esentiala-sau-importanta-nis2</link><guid>https://www.certudo.com/en/blog/entitate-esentiala-sau-importanta-nis2</guid><description>Classification depends on sector and size. We explain the criteria, in terms everyone can understand.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>The DNSC Excel templates or a NIS2 platform: what to choose</title><link>https://www.certudo.com/en/blog/excel-sau-platforma-nis2</link><guid>https://www.certudo.com/en/blog/excel-sau-platforma-nis2</guid><description>The official DNSC Excel templates or a dedicated platform? A balanced comparison on effort, errors, updating, collaboration, evidence, reporting and cost.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>NIS2 in the public sector: which cyber security measures become mandatory for city halls?</title><link>https://www.certudo.com/en/blog/nis2-institutii-publice</link><guid>https://www.certudo.com/en/blog/nis2-institutii-publice</guid><description>Public administration is covered by NIS2. What obligations city halls and institutions have, why the first sanctions targeted the public sector and what to do now.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>Basic, Important or Essential? How to choose the right security level for your organisation</title><link>https://www.certudo.com/en/blog/niveluri-cyfun-baza-important-esential</link><guid>https://www.certudo.com/en/blog/niveluri-cyfun-baza-important-esential</guid><description>CyFun has three assurance levels in Romania. The level determines how many and which controls you implement.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>Managing DNSC notifications (the 24h / 72h / 1 month rule)</title><link>https://www.certudo.com/en/blog/raportare-incidente-dnsc-nis2</link><guid>https://www.certudo.com/en/blog/raportare-incidente-dnsc-nis2</guid><description>NIS2 requires significant incidents to be notified within strict deadlines. Here is what the process looks like.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>NIS2 for the leadership: what the new directive means for administrators and directors</title><link>https://www.certudo.com/en/blog/raspunderea-conducerii-nis2</link><guid>https://www.certudo.com/en/blog/raspunderea-conducerii-nis2</guid><description>NIS2 brings security into management. The management approves, oversees and is accountable.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>How to choose a DNSC-attested NIS2 auditor</title><link>https://www.certudo.com/en/blog/cum-alegi-auditor-nis2</link><guid>https://www.certudo.com/en/blog/cum-alegi-auditor-nis2</guid><description>What a DNSC-attested cyber security auditor means, how to check them, the difference between internal and external audit and the questions to ask before the contract.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>From self-assessment to audit: the path to compliance</title><link>https://www.certudo.com/en/blog/autoevaluare-audit-nis2</link><guid>https://www.certudo.com/en/blog/autoevaluare-audit-nis2</guid><description>NIS2 compliance is a path with clear stages. Here is how you walk it.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>What CyFun is and why it is used by DNSC</title><link>https://www.certudo.com/en/blog/cyfun-dnsc</link><guid>https://www.certudo.com/en/blog/cyfun-dnsc</guid><description>CyFun, or CyberFundamentals, is the technical framework that DNSC adopts for NIS2 in Romania.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>What NIS2 is and what changes for companies in Romania</title><link>https://www.certudo.com/en/blog/directiva-nis2-romania</link><guid>https://www.certudo.com/en/blog/directiva-nis2-romania</guid><description>The European cybersecurity directive, transposed in Romania through OUG 155/2024, extends the obligations for ensuring the cybersecurity framework to thousands of new organizations.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>What evidence must be maintained for NIS2</title><link>https://www.certudo.com/en/blog/dovezi-registre-nis2</link><guid>https://www.certudo.com/en/blog/dovezi-registre-nis2</guid><description>Assets, risks, incidents, suppliers, vulnerabilities and more. NIS2 requires evidence of compliance, not just documents.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>The six CyFun functions, in terms everyone can understand</title><link>https://www.certudo.com/en/blog/functii-cyfun</link><guid>https://www.certudo.com/en/blog/functii-cyfun</guid><description>Govern, Identify, Protect, Detect, Respond and Recover. What each one means.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>The first NIS2 fine applied by DNSC: what happened and what you learn from it</title><link>https://www.certudo.com/en/blog/prima-amenda-dnsc-nis2</link><guid>https://www.certudo.com/en/blog/prima-amenda-dnsc-nis2</guid><description>DNSC applied the first fine under OUG 155/2024: 50,000 lei for failing to register on time. What happened, what it signals and what you do if you have not registered.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
  <item><title>The NIS2 timeline, from registration to audit</title><link>https://www.certudo.com/en/blog/termene-nis2-calendar</link><guid>https://www.certudo.com/en/blog/termene-nis2-calendar</guid><description>Registration, risk assessment, self-assessment, implementation and audit. Here is the order of the steps.</description><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate></item>
</channel></rss>
