The Danish NIS 2 Act came into force on 1 July 2025. Cloud operations can be handed to a supplier, but management accountability, the risk assessment and the documentation stay with you. The whitepaper starts where the question of scope ends: with control over the cloud your critical functions depend on.
What the whitepaper covers
- Management accountability under section 7, and what the authorities can require during supervision
- The ten minimum areas in section 6 translated into five cloud controls: access, incidents, recovery, supply chain and exit
- How responsibility is split between you and the supplier, and where gaps usually appear
- The 24-hour, 72-hour and one-month reporting deadlines, and what the supplier contract has to secure
- Twelve questions for market dialogue, due diligence and supplier follow-up
For management, IT, security and procurement leads in organisations covered by NIS 2. The whitepaper is written in Danish.