During the summer, we’ve focused heavily on expanding Cyberday’s framework coverage.
Today, we’re releasing support for 12 new national implementations of the EU NIS2 directive, along with a new framework for Belgium’s critical infrastructure law. These additions make Cyberday an even stronger choice for teams managing overlapping cybersecurity obligations across multiple legal frameworks.
12 new NIS2 countries supported
NIS2 is the EU-wide cybersecurity directive aiming to improve the overall level of cybersecurity across the union. It applies to both essential and important entities in sectors such as energy, transport, health, digital infrastructure, ICT services, waste management, and public administration.
Read more: What is NIS2 directive?
Some of the new frameworks are based on draft laws, while others are already in effect. We'll continue updating these frameworks as the national regulations progress.
The expected overlap shown for each version reflects task coverage in Cyberday: if your organization already complies 100% with the EU-level NIS2 directive, this is how well you’ll also cover the national implementation.
In addition to the new frameworks, we already support six effective national implementations. If your country isn’t on the supported list yet, you can still get started using the EU-level directive as your base.
This brings us to 18 supported countries, plus the general EU-level NIS2 framework.
🇧🇪 Belgian critical infrastructure law: Loi sur les infrastructures critiques
We’ve also added support for Belgium’s Loi sur les infrastructures critiques (Critical Infrastructure Act), officially known as the Law of 1 July 2011.
This national law establishes security requirements for entities operating critical infrastructure across key sectors like energy, finance, and transportation.
While this law predates NIS2 and focuses on physical and operational continuity, it still aligns with many NIS2 objectives, especially in sectors like energy and transport, which are core areas under both laws. For organizations operating in these critical industries, this framework helps address overlapping obligations across multiple laws. Managing the Belgian critical infrastructure law alongside NIS2 becomes easy in Cyberday using the same task structure and central documentation logic.
Read also: Cyber security regulations and frameworks in Belgium 🇧🇪
More new frameworks on the way
You can now explore and activate these frameworks from the Frameworks view in Cyberday. Just open the NIS2 directive, then select your local version. Tasks that apply to multiple frameworks are automatically linked, so you won’t need to do anything twice.
If you’re already working with NIS2, these national versions help ensure you stay aligned with the local legislation as enforcement begins.
This is just the first batch of new frameworks we've worked on during summer. We have bunch more coming in the coming months!