Expertise · Cybersecurity
Cybersecurity
& NIS2 lawyer
Luxembourg
Legal support for cybersecurity in Luxembourg and the Greater Region: NIS2 compliance, incident management and reduction of digital liability.
- NIS2 Directive
- Incident management
- ISO 27001
- Notification
- Digital liability
Cybersecurity,
a legal issue
Cybersecurity is no longer just a technical matter: it is now a legal obligation. The NIS2 Directive significantly widens the range of entities concerned in Luxembourg. Mangrove supports you with compliance and the legal handling of incidents.
NIS2 compliance
Assessment of whether you are in scope, implementation of risk management measures and governance obligations.
Legal incident management
Incident qualification, coordination of the response, legal framework for information reporting.
Notification to the authorities
Compliance with notification deadlines to the competent authority and to the persons concerned.
Management liability
The NIS2 Directive makes management bodies directly liable. We help you keep that liability under control.
Supply chain
Contractual security of your relationships with IT suppliers and subcontractors.
How we work
Assessment
Assessment of your level of exposure and of whether NIS2 applies to you.
Mapping
Inventory of critical systems, risks and applicable obligations.
Compliance
Deployment of measures, security policies and notification procedures.
Incident readiness
Response plans, simulations and support in a crisis.
Frequently asked questions
The questions our clients in Luxembourg and the Greater Region ask most often.
Does NIS2 apply to my organisation?
The NIS2 Directive applies to a wide range of sectors (energy, health, digital, transport, etc.) and lowers the thresholds compared with NIS1. Many medium-sized entities in Luxembourg are now in scope.
What are the penalties for NIS2 non-compliance?
Penalties can be significant and, above all, can engage the personal liability of managers. Compliance is therefore a governance issue.
Are NIS2 and the GDPR linked?
Yes. A cybersecurity incident is often also a personal data breach under the GDPR. Our dual expertise addresses both dimensions consistently.
How long does it take to become compliant?
Depending on the maturity of your organisation, a NIS2 compliance project generally takes 3 to 9 months.
NIS2 compliance
to prepare for?
Let’s assess your exposure together.