🇷🇴 Romanian, 6 October 2026, cybersecurity regulation
Romania Extends Cybersecurity Responsibility to Company Management
Directive NIS2 brings cybersecurity to boardroom level, making management responsible for security measures.
The implementation of the NIS2 directive in Romania brings cybersecurity to the level of company decision-making, making compliance no longer solely the responsibility of the IT department, according to Espace IT, a consulting and technical services company specializing in cybersecurity, IT audit, and digital compliance.
NIS2, the European framework for cybersecurity, currently applies to 18 sectors of activity, up from seven previously.
The pressure on companies also comes from the evolution of threats, with over 48,000 new vulnerabilities published in 2025, a 22% increase from the previous year, according to the ENISA report.