The NIS2 directive, adopted by the European Union, ensures a high level of digital resilience across sectors that provide critical services to society and the economy. Compliance with NIS2 confirms that LCL applies robust risk management and incident response practices in line with European standards.
NIS2 builds on key principles of governance, risk management, and reporting. It requires organisations to identify and mitigate cybersecurity risks proactively, monitor supply-chain dependencies, and report significant incidents within strict deadlines.
At LCL, these principles are embedded in daily operations. We apply structured processes for risk analysis, vulnerability management, and incident response, ensuring that our infrastructure remains resilient to cyberthreats. Awareness and accountability are integral parts of our cybersecurity culture, supported by training and continuous improvement.
LCL achieved compliance with the NIS2 directive in November 2025. This certification reflects the maturity of our risk management and incident response processes. It also reinforces our ongoing commitment to secure, transparent, and resilient operations that protect our customers’ data across all sites.