Expert Session Recording - NIS2 in Practice

On August 20th, 2026, we hosted a webinar on the topic of NIS2.

Please find the recording and a summary below:

Video Recording:

Summary:

• The session brought together perspectives from Moxso (awareness and human risk) and Wingman Security (managed technical security), covering how the two layers work together under NIS2.
• Speakers walked through what NIS2's "five essentials" mean in practice, with a focus on governance, board accountability, and value chain risk.
• Discussion centered on the gap between "hard security" (technical infrastructure) and the human layer — the behaviors that happen before an incident occurs.
• The conversation also addressed how to bring NIS2 to leadership in the terms they respond to — ROI, KPIs, and operational efficiency, not just compliance language.
  
  

Key takeaways:

• NIS2 isn't an IT project. Every department can be a target, and the audience poll showed most organizations still default to "IT owns this" — that's the gap.
• Compliance isn't a one-time checkbox. Auditors want to see continuous, evidence-based awareness tied to risk management, not a quiz done once a year.
• The human layer is your first line of defense. Most incidents start before a technical system is even touched, at the point someone clicks or enters credentials.
• Proof matters more than paperwork. Boards and auditors expect dashboards and resilience scoring that show progress over time, not a binder of policies.
• Start small. Assess what NIS2 requires for your organization (directly or through your customers/suppliers), and build continuous improvement into what you already have, rather than trying to overhaul everything at once.