The rules impose tougher requirements on companies around their internal cyber resilience strategy and internal practices. CNBC runs through all you need to know about NIS 2 — from what the law requires to the potential penalties businesses could face for violations. Under NIS 2, firms will also have to vet their digital supply chains for cyber threats and vulnerabilities. Companies that fail to comply with the new law could face massive potential fines, along with other punitive actions. Still, even with cyber security a much more prominent focus in board rooms, this hasn't stopped cyberattacks from taking place.

---

Persons: Oscar Wong, Geert van der Linden, Van der Linden, It's, Chris Gow, Carl Leonard, Leonard, Cisco's Gow, CISO, cyberattacks, Gow Organizations: European Union, NIS, CNBC, Information, EU, Companies, noncompliance, Data, Union Locations: EU, Capgemini, Russian