National Cyber Security Bill and NIS2: Senior Management’s Compliance Guide

**Executive summary:** This report explains how the EU NIS2 Directive and Ireland’s forthcoming National Cyber Security Bill place clear legal accountability for cybersecurity on senior management, detailing which individuals may fall within the scope of Article 20, expectations for board education and documentation, the potential for significant administrative fines and personal liability, and recommended preparatory actions—identify and document board membership, provide ongoing cybersecurity training and briefings, adopt recognized frameworks (e.g., ISO 27001, NIST), and maintain records of approvals and decisions to mitigate legal exposure.