NIS2 and KSC

Where should the board begin preparing for NIS2?

With two board decisions: who is the entity manager within the meaning of the KSC Act, and whether the qualification has been documented. Only after these does a gap analysis, implementation plan, and budget make sense.