NIS 2 LI case studies

NIS 2 LI · Put your knowledge to work in context.

The NIS 2 Lead Implementer credential is a professional certification offered by PECB, a certification body whose stated focus is "Building Digital Trust" through training courses and certification. PECB's own navigation places the NIS 2 Directive training within its Cybersecurity Management category, alongside topics such as Cloud Security, Penetration Testing, SCADA and ISO/IEC 27033, and lists a NIS 2 Directive Lead Implementer entry under the same programme family. The NIS 2 LI case studies are 5 cases and about 5,347 words.

Group structure decides everything: who is in scope and how are they classified?

Nordhavn Gruppen A/S is a Danish group with three legal entities. Nordhavn Food Logistics A/S (NFL) employs 240 people and reported a turnover of EUR 61 million in the last financial year; it runs refrigerated warehousing and distribution for food retailers in Denmark and northern Germany.

1,030 words, about 5 min 2

Municipal water supplier: scoping and sequencing an 18-month programme with EUR 400,000

Wasserwerk Rheinbach GmbH supplies drinking water to 480,000 people in western Germany from 42 waterworks, 2,900 km of mains and two control rooms. It has 310 employees, an ISO 9001 quality management system, and one part-time IT security officer at 40% capacity.

1,023 words, about 5 min 3

Online marketplace: turning a gap list into Art. 21 measures, and settling the shared-responsibility argument

Medianova Marketplace B.V. is a Dutch online marketplace with 140 employees, 9.5 million monthly active users in the Union and EUR 180 million in annual transaction volume; it is an important entity as a digital provider.

1,164 words, about 6 min 4

Rail freight ransomware: significant-incident judgement and the arithmetic of the reporting clock

Baltic Rail Cargo SIA is a Latvian rail freight undertaking with 640 employees and is an essential entity under the national transposition. On Monday 3 March 2025 at 03:40 the on-call engineer found that the wagon-tracking dashboard had stopped updating and that a ransom note was displayed on the dispatch server console.

1,081 words, about 5 min 5

Certified but out of scope: an ISMS certificate that does not cover the business

Ventilwerk Bauer GmbH manufactures industrial control valves and actuators in Germany, with 780 employees and EUR 190 million turnover; it is an important entity under the national transposition. It holds an ISO/IEC 27001:2022 certificate issued in 2023 whose scope reads 'corporate IT services and the Ulm data centre', explicitly excluding product development, manufacturing execution systems and the Timișoara plant acquired in November.

1,049 words, about 5 min