NIS2 Directive requirements for Latvia

NIS2 refers to 'important' (essential) and 'important' (important) entities: energy, transport, bank, health, digital infrastructure, public administration, etc. Latvia is implementing the National Cybersecurity Law and Cabinet Regulations. Key requirements: 1) Risk management measures (10 points - Policy, incident management, BCP, supply chain, cryptography, MFA, security training, etc.); 2) Notification of incidents - 'early warning' 24h, initial report 72h, final report 1 month; 3) Management responsibility - management can personally answer for non-compliance; 4) Registration CERT.LV; 5) Penalty amount up to 10 million. EUR or 2% of turnover.