Translations:Network and Information Security Directive (NIS2-RL)/170/en

In addition to financial penalties, the competent authority may impose further measures:

• Issuance of binding instructions to ensure compliance with the Directive.
• Temporary suspension of business activities in case of non-compliance with orders.
• Temporary prohibition for individuals in management positions to exercise managerial functions.
• **Liability of management**: Members of the governing body (e.g. executives, directors) may be held personally liable for ensuring compliance with cybersecurity obligations.