Guides
Guides and articles about NIS2, the Cybersecurity Act, GDPR and CRA - written to be concrete, not generic.
Getting started with Nisenta
NIS2 and the Swedish Cybersecurity Act
Which sectors are covered by NIS2 and the Cybersecurity Act?
All 18 sectors, split into essential and important entities, with concrete examples per sector.
NIS2 checklist - get started step by step
Ten concrete steps, from determining if you're in scope to registration, risk analysis, and documentation.
NIS2 in Sweden - Cybersecurity Act timeline
Every key date from SOU 2024:18 to entry into force and the handover to NCSC.
NIS2 vs. the old NIS law - what's new?
Already had routines under the old NIS law? Here's what's stricter now and why that's not enough on its own.
GDPR
NIS2 and GDPR - what applies to you?
Differences and overlap between the frameworks, and how to coordinate incident reporting, risk work and suppliers.
Personal data breaches under GDPR
When a breach must be notified to IMY within 72 hours, when data subjects must be told and how to document it.
Record of processing activities under GDPR
Who needs one, what it must contain under Article 30 and how to keep it up to date.
CRA
The Cyber Resilience Act (CRA) explained
Who is covered, product categories, penalties and the timeline up to December 2027.
CRA: requirements for products with digital elements
Essential cybersecurity requirements, vulnerability handling, SBOM, technical documentation and CE marking.
CRA reporting obligations
The 24-hour, 72-hour and final-report deadlines - and where to report since 11 September 2026.