OT Governance Radar

Deadlines calendar

Every dated obligation and milestone in our data, with its source. Add it to your calendar: Download .ics

September 2024

  • NIS2 LV Latvia: NIS2 national law enters into force
    ecs-org.eu needs verification

October 2024

November 2024

  • NIS2 Commission letters of formal notice to 23 Member States
    ec.europa.eu source-checked

December 2024

January 2025

  • NIS2 SK Slovakia: NIS2 national law enters into force
    ecs-org.eu secondary source

April 2025

  • NIS2 FI Finland: NIS2 national law enters into force
    ecs-org.eu secondary source
  • NIS2 UA Ukraine: NIS2 national law enters into force
    ecs-org.eu needs verification

May 2025

June 2025

  • NIS2 SI Slovenia: NIS2 national law enters into force
    ecs-org.eu secondary source

July 2025

  • NIS2 DK Denmark: NIS2 national law enters into force
    ecs-org.eu secondary source

October 2025

  • NIS2 RS Serbia: NIS2 national law enters into force
    ecs-org.eu needs verification

November 2025

December 2025

  • NIS2 DE Germany: NIS2 national law enters into force
    ecs-org.eu secondary source

January 2026

  • NIS2 EE Estonia: NIS2 national law enters into force
    ecs-org.eu secondary source
  • NIS2 SE Sweden: NIS2 national law enters into force
    ecs-org.eu secondary source
  • NIS2 Commission proposes targeted NIS2 amendments (COM(2026) 13) alongside Cybersecurity Act 2
    eur-lex.europa.eu source-checked

March 2026

  • NIS2 DE Germany: registration deadline for entities in scope at entry into force (3 months, derived)
    bsi.bund.de needs verification

April 2026

  • NERC CIP CIP-003-9 (low-impact vendor remote access controls) mandatory and enforceable
    nerc.com source-checked
  • NIS2 PL Poland: NIS2 national law enters into force
    ecs-org.eu secondary source
  • NIS2 BE Belgium: essential entities – first CyFun verification / ISO 27001 evidence / inspection request
    atwork.safeonweb.be source-checked

May 2026

  • TSA SDs SD Pipeline-2021-02G and SD 1580/82-2022-01E effective
    tsa.gov source-checked
  • NIS2 LU Luxembourg: NIS2 national law enters into force
    ecs-org.eu secondary source

June 2026

July 2026

August 2026

  • NERC CIP FERC order approving CIP-015-2 (INSM extended scope), Docket RD26-6-000
    nerc.com source-checked
  • NIS2 NL Netherlands: NIS2 national law enters into force
    ecs-org.eu secondary source

September 2026

  • CRA Manufacturer reporting obligations apply; ENISA Single Reporting Platform operational
    digital-strategy.ec.europa.eu source-checked
  • SOCI End of 2025–26 CIRMP annual report window (opened 1 Jul 2026)
    cisc.gov.au needs verification

October 2026

  • NIS2 AT Austria: NIS2 national law enters into force
    ecs-org.eu secondary source
  • CIRCIA CIRCIA final rule submitted to OMB/OIRA for review
    insideprivacy.com needs verification
  • UK NIS / CS&R Bill Lords report stage completed (two amendments agreed against government)
    parliament.uk source-checked
  • NIS2 IT Italy: basic security measures deadline for 2025-listed NIS entities (reported; verify per listing date)
    iusprivacy.eu needs verification

November 2026

December 2026

January 2027

  • NIS2 IT Italy: incident notification obligation starts for entities first listed in 2026
    acn.gov.it source-checked
  • Machinery Reg. Regulation applies (general date of application)
    eur-lex.europa.eu needs verification

April 2027

  • NIS2 PL Poland: end of adjustment period – implement KSC obligations and start using System S46
    gov.pl source-checked
  • NIS2 BE Belgium: essential entities – final CyFun level certified / ISO 27001 certification complete
    atwork.safeonweb.be source-checked

May 2027

  • TSA SDs Current pipeline and rail SDs expire (renewal expected to be watched)
    tsa.gov source-checked

July 2027

  • NIS2 IT Italy: basic security measures deadline for entities first listed in 2026
    acn.gov.it source-checked

September 2027

  • NIS2 AT Austria: self-declaration under § 33 NISG 2026 (reported)
    ris.bka.gv.at needs verification

December 2027

  • CRA Main obligations apply (essential requirements, CE marking); open-source steward reporting (Art. 24(3)) applies
    digital-strategy.ec.europa.eu source-checked

April 2028

  • NIS2 PL Poland: first ISMS audit for key entities that were not operators of essential services; fines provisions start
    gov.pl source-checked

July 2028

  • NERC CIP Multiple revised CIP standards (e.g. CIP-004-8, CIP-005-8, CIP-006-7.1, CIP-007-7.1, CIP-008-7.1, CIP-011-4.1, CIP-013-3) listed with this future date
    nerc.com needs verification

August 2028

  • NIS2 NL Netherlands: executive board members must meet Cbw knowledge/training requirements (two years after entry into force; RDI says "mid-2028")
    rdi.nl needs verification

October 2028

  • NERC CIP CIP-015-1 Internal Network Security Monitoring effective
    nerc.com source-checked

October 2029

  • NERC CIP CIP-015-2 effective (replaces CIP-015-1; phased compliance per implementation plan)
    nerc.com source-checked