Indeed, NIS2 and CRA are meant to motivate critical infrastructure to allocate focus and resources as needed. There is enough blame and incompetence to go around.

Do you want to guess which EU country delayed their NIS2 implementation - again - in the Summer of 2026?

https://www.it-connect.tech/nis-2-delay-france-referred-to-t...