The Act gives supervisors the power to order corrections, impose fines and in serious cases hold management responsible. Fines for essential entities can reach 10 million euro or 2 percent of global turnover. For important entities the ceiling is 7 million euro or 1.4 percent.
Why it matters
For NIS2, sanctions is rarely a purely technical question. It touches ownership, budget and how quickly decisions can be made when something goes wrong. Teams that agree on these points in advance spend less time debating them under pressure.
What to check
- Understand which breaches lead to sanctions
- Know the escalation path from order to fine
- Make sure management knows its personal exposure
Where to start
In practice supervisors start with dialogue and orders. Organisations that can show a plan and progress are in a far better position. Write down what you decide, who owns it and when it will be reviewed. That record is often the evidence a reviewer asks for later.