NIS2 for Estonian Business Leaders: Compliance, Liability, and First Steps (with Andres Järv)

NIS2 is now reshaping cybersecurity expectations for Estonian businesses—and the scope has grown fast. In this episode of the NeverHack Cybercast, Louis Zezeran is joined by NEVERHACK security advisor Andres Järv to break down what NIS2 really is (an EU directive), how Estonia implemented it through the Cybersecurity Act (KüTS), and why thousands more organizations may now be in scope. You’ll learn the difference between E-ITS (Estonia’s detailed, prescriptive standard) and ISO 27001 (international, risk-based), what audits and evidence look like, and what “management responsibility” means in practice. Andres also shares practical first-step examples—policies, risk management, incident handling, asset/vulnerability management, and staff awareness—so you can start building compliance without panic. 🎧 Listen now, subscribe for more, and contact NEVERHACK if you need guidance on where to begin.