...
Mauro: A question on connectivity between two entities subjected to NIS-2 a University and an NREN e.g. Will be possible to connect with an entity which is not NIS-2 compliant ? It reads like everyone is on its own. The impact of non-compliance will be interesting. Do we have a duty to enforce compliance? Will we need to segregate networks? Can we have "federation rules" along the lines of SAML federation approach. Needs a grace period that allows people to evolve. This is also true of the current environment with NIS1...don't expect a harmonised situation any time soon.