{"id":19750,"date":"2025-05-20T07:20:00","date_gmt":"2025-05-20T05:20:00","guid":{"rendered":"https:\/\/thesmartcityjournal.cibeles.net\/sin-categoria\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\/"},"modified":"2025-05-20T07:19:46","modified_gmt":"2025-05-20T05:19:46","slug":"nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","status":"publish","type":"post","link":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","title":{"rendered":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience"},"content":{"rendered":"<p class=\"lead\">A closer look at how Europe\u2019s flagship cybersecurity directive is being translated from policy to practice.<\/p>\n<p>At the 2025 <a href=\"https:\/\/www.barcelonacybersecuritycongress.com\/\" target=\"_blank\" rel=\"nofollow noopener\">Barcelona Cybersecurity Congress<\/a>, one directive resonated across keynotes, panels, and informal conversations: NIS2. Two standout sessions in particular\u2014one focused on practical implementation experiences, and another offering a data-driven regulatory overview\u2014captured the multi-layered challenges organizations face in adapting to this directive. Though its enforcement deadline has passed, the directive\u2019s implementation remains fragmented, uneven, and fraught with real-world complications. As Europe pushes toward a more secure digital future, the cybersecurity community gathered in Barcelona to take stock of where things stand\u2014and where they need to go.<\/p>\n<p>The NIS2 Directive\u2014short for the Directive on Security of Network and Information Systems\u2014is the EU\u2019s most comprehensive attempt yet to build cyber resilience across critical infrastructure and essential services. It replaces the 2016 NIS Directive, expanding its reach to more sectors, tightening reporting deadlines, and increasing accountability at the executive level. It\u2019s a response to an evolving threat landscape\u2014but also a pressure test for cross-border coordination and organizational culture.<\/p>\n<h2 class=\"articletitle\">Organizational Perspectives on Implementation<\/h2>\n<p>One of the most anticipated sessions at BCC25, titled \u201cNIS2: Challenges, Opportunities, and Experiences in the Implementation of the New Directive,\u201d brought together perspectives from public and private institutions to discuss how organizations are adapting to the evolving demands of the directive.<\/p>\n<p>The panel brought together perspectives from public and private sector leaders, including David Esteban Haro (CISO, Barcelona City Council), \u00d3scar L\u00f3pez Sant\u00edn (Cybersecurity Manager, Agrolimen Group), and Javier Montoya Tom\u00e1s (Director of Cybersecurity, Continuity and Risk, Aig\u00fces de Barcelona), with moderation by Malu Ribalta Ribelles (Director of Public Affairs and Communication, ISMS Forum).<\/p>\n<p>Proportionality, a principle central to the directive, became a recurring theme. It\u2019s supposed to ensure that cybersecurity measures are scaled appropriately to the size and risk profile of each organization. But translating that into action has been elusive. \u00d3scar L\u00f3pez from Agrolimen summed up the dilemma: \u201cWe have many small suppliers. We\u2019re not just auditing them\u2014we\u2019re helping them, even doing the consultancy work ourselves. It&#8217;s the only way to guarantee security across the supply chain. But it\u2019s a huge task. We have to prioritize.\u201d<\/p>\n<p>Beyond budgets and compliance plans, there was a call for a broader shift in mindset. David Esteban from the Ajuntament de Barcelona stressed that cybersecurity can no longer live in a technical silo. \u201cThe biggest challenge is cultural,\u201d he said. \u201cThe CISO must speak the language of the business to gain alignment and trust.\u201d<\/p>\n<p>Javier Montoya of Aig\u00fces de Barcelona offered a glimpse into how his team approached this challenge by steadily bringing the board into the conversation, without panic or pressure. \u201cWe framed risk in calm, constructive terms\u2014not threats or fear. It&#8217;s about preparing for what\u2019s coming, not panicking.\u201d<\/p>\n<p>Across sectors, the impact of NIS2 is unfolding differently. For financial institutions already working under frameworks like DORA, the shift has felt like a compliance formality. For healthcare organizations, it\u2019s a storm\u2014too many regulations, too few resources, too much exposure. Manufacturers sit somewhere in the middle, dealing with complex IT\/OT integration and a growing reliance on consumer-grade technology in industrial environments.<\/p>\n<h2 class=\"articletitle\">The European Regulatory Landscape<\/h2>\n<p>Separately, a session titled \u201cNIS2 Directive Implementation State of Play: National Transposition, Entities Readiness Level, and Sectoral Applications,\u201d led by R\u00e9gis Cazenave of ECSO, presented a data-driven overview of the current regulatory landscape. He noted that only eleven EU member states had fully transposed NIS2 into national law. ECSO maintains an up-to-date <a href=\"https:\/\/ecs-org.eu\/activities\/nis2-directive-transposition-tracker\/\" target=\"_blank\" rel=\"nofollow noopener\">NIS2 Transposition Tracker<\/a>, visualizing the state of implementation across the EU. He highlighted the burden of fragmented incident reporting requirements across countries and introduced ECSO\u2019s roadmap to coherence: nine key recommendations ranging from a unified EU reporting mechanism to the formal recognition of existing international standards. \u201cOtherwise,\u201d he noted, \u201ccompanies are forced to fill out different reports for each country impacted by a single incident.\u201d<\/p>\n<p><i><img fetchpriority=\"high\" decoding=\"async\" style=\"display: block;margin-left: auto;margin-right: auto\" src=\"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/Cazenave_ECSO_BCC25.jpg\" alt=\"R\u00e9gis Cazenave, ECSO, explica los retos de NIS2 en BCC25\" width=\"800\" height=\"500\" \/><\/i><\/p>\n<p>The ECSO survey results\u2014based on feedback from 155 organizations across 23 countries\u2014provided an inside look at how stakeholders are experiencing the transition. More than half of the respondents were newly regulated under NIS2, facing steep learning curves and operational stress. Many reported difficulty interpreting the directive, challenges coordinating across internal departments, and a lack of specific national guidance. The survey also revealed that in many organizations, NIS2-related efforts now account for 5% to 10% of the cybersecurity budget\u2014an indicator of both its weight and urgency.<\/p>\n<p>Cazenave also emphasized the need for alignment in incident classification across the EU. Different member states are using varying criteria and timelines for reporting, ranging from six-hour windows in Germany to broader thresholds in others. This creates a patchwork of obligations that\u2019s especially difficult for cross-border companies to manage. Inconsistencies extend to how sectors are classified as well. While some countries have opted for minimal transposition, others have expanded the directive\u2019s scope to include additional sectors and smaller organizations.<\/p>\n<p>ECSO\u2019s roadmap didn\u2019t just critique\u2014it also offered a way forward: encourage harmonized tools, accept compliance via well-known international standards like ISO 27001, and provide extra support for smaller, newly regulated entities. The emphasis was clear: compliance must be achievable and scalable.<\/p>\n<h2 class=\"articletitle\">Bridging the Divide<\/h2>\n<p>While challenges remain, the message from BCC25 was grounded in realism and forward motion. The road to NIS2 compliance is uneven, the directive\u2019s rollout incomplete, and the tools scattered. But the ambition\u2014to strengthen Europe\u2019s digital resilience\u2014is widely shared.<\/p>\n<p>The task now is to close the gap not only between countries, but between intention and implementation. In Barcelona, the conversation began to bridge that divide.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A closer look at how Europe\u2019s flagship cybersecurity directive is being translated from policy to practice. At the 2025 Barcelona Cybersecurity Congress, one directive resonated across keynotes, panels, and informal conversations: NIS2. Two standout sessions in particular\u2014one focused on practical implementation experiences, and another offering a data-driven regulatory overview\u2014captured the multi-layered challenges organizations face in\u2026<\/p>\n","protected":false},"author":12,"featured_media":19747,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_scj_primary_category_id":58,"_scj_featured":true,"_scj_featured_from":"","_scj_featured_until":"","_scj_featured_order":146,"_scj_visibility_class":"current","_scj_layout_family":"standard","_scj_article_style":"","_scj_display_overrides":[],"_scj_intro_image_id":19747,"_scj_intro_alt":"NIS2 remains fragmented; BCC25 highlights challenges and progress","_scj_intro_caption":"","_scj_intro_class":"","_scj_intro_float":"","_scj_full_image_id":19747,"_scj_full_alt":"NIS2 remains fragmented; BCC25 highlights challenges and progress","_scj_full_caption":"","_scj_full_class":"","_scj_full_float":"","_scj_media_type":"","_scj_media_provider":"","_scj_media_external_id":"","_scj_media_url":"","_scj_media_poster_id":0,"_scj_media_width":0,"_scj_media_height":0,"_scj_media_aspect_ratio":"","_scj_media_description":"","_scj_gallery_items":[],"_scj_related_post_ids":[],"_scj_additional_authors":[],"scj_layout_family":"standard","scj_media_provider":"","scj_media_url":"","scj_full_caption":"","footnotes":""},"categories":[58],"tags":[4521,2539,2537,4247,2538,2535,4541,2536],"class_list":["post-19750","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-barcelona-cybersecurity-congress","tag-ciso","tag-cross-border-compliance","tag-cybersecurity","tag-ecso","tag-european-regulation","tag-nis2","tag-supply-chain-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com<\/title>\n<meta name=\"description\" content=\"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com\" \/>\n<meta property=\"og:description\" content=\"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\" \/>\n<meta property=\"og:site_name\" content=\"thesmartcityjournal.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thesmartcityjournal\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-20T05:20:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Esther Fuldauer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@SmartCityJour_\" \/>\n<meta name=\"twitter:site\" content=\"@SmartCityJour_\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Esther Fuldauer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\"},\"author\":{\"name\":\"Esther Fuldauer\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#\\\/schema\\\/person\\\/a98d667dd10b0ffa25c2004354cd78e7\"},\"headline\":\"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience\",\"datePublished\":\"2025-05-20T05:20:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\"},\"wordCount\":958,\"publisher\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/BCC25.jpg\",\"keywords\":[\"Barcelona Cybersecurity Congress\",\"CISO\",\"Cross Border Compliance\",\"Cybersecurity\",\"ECSO\",\"European Regulation\",\"NIS2\",\"Supply Chain Security\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\",\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\",\"name\":\"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/BCC25.jpg\",\"datePublished\":\"2025-05-20T05:20:00+00:00\",\"description\":\"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage\",\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/BCC25.jpg\",\"contentUrl\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/BCC25.jpg\",\"width\":1280,\"height\":800,\"caption\":\"Panelistas del BCC25 debaten la implementaci\u00f3n de la directiva NIS2 y los retos organizativos que supone su adaptaci\u00f3n\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/cybersecurity\\\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#website\",\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\",\"name\":\"thesmartcityjournal.com\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"NewsMediaOrganization\"],\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#organization\",\"name\":\"thesmartcityjournal.com\",\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/logo-smart-city-journal-1.png\",\"contentUrl\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/logo-smart-city-journal-1.png\",\"width\":346,\"height\":91,\"caption\":\"thesmartcityjournal.com\"},\"image\":{\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/thesmartcityjournal\",\"https:\\\/\\\/x.com\\\/SmartCityJour_\",\"https:\\\/\\\/www.instagram.com\\\/thesmartcityjournal_\\\/\",\"https:\\\/\\\/www.tiktok.com\\\/@thesmartcityjournal\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-smart-city-journal\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCIPTMzK206pVFxMNjO7SSxw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#\\\/schema\\\/person\\\/a98d667dd10b0ffa25c2004354cd78e7\",\"name\":\"Esther Fuldauer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"caption\":\"Esther Fuldauer\"},\"url\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en\\\/author\\\/esther-fuldauer\"},{\"@type\":\"SiteNavigationElement\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#site-navigation\",\"cssSelector\":[\".cib-main-menu\"]},{\"@type\":\"WPHeader\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#header\",\"cssSelector\":[\".cib-header\"]},{\"@type\":\"WPFooter\",\"@id\":\"https:\\\/\\\/www.thesmartcityjournal.com\\\/en#footer\",\"cssSelector\":[\".cib-footer\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com","description":"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","og_locale":"en_US","og_type":"article","og_title":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com","og_description":"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.","og_url":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","og_site_name":"thesmartcityjournal.com","article_publisher":"https:\/\/www.facebook.com\/thesmartcityjournal","article_published_time":"2025-05-20T05:20:00+00:00","og_image":[{"width":1280,"height":800,"url":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg","type":"image\/jpeg"}],"author":"Esther Fuldauer","twitter_card":"summary_large_image","twitter_creator":"@SmartCityJour_","twitter_site":"@SmartCityJour_","twitter_misc":{"Written by":"Esther Fuldauer","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#article","isPartOf":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience"},"author":{"name":"Esther Fuldauer","@id":"https:\/\/www.thesmartcityjournal.com\/en#\/schema\/person\/a98d667dd10b0ffa25c2004354cd78e7"},"headline":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience","datePublished":"2025-05-20T05:20:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience"},"wordCount":958,"publisher":{"@id":"https:\/\/www.thesmartcityjournal.com\/en#organization"},"image":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage"},"thumbnailUrl":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg","keywords":["Barcelona Cybersecurity Congress","CISO","Cross Border Compliance","Cybersecurity","ECSO","European Regulation","NIS2","Supply Chain Security"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","url":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience","name":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience - thesmartcityjournal.com","isPartOf":{"@id":"https:\/\/www.thesmartcityjournal.com\/en#website"},"primaryImageOfPage":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage"},"image":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage"},"thumbnailUrl":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg","datePublished":"2025-05-20T05:20:00+00:00","description":"NIS2 implementation remains fragmented across Europe. At BCC25, public and private leaders shared cultural, technical, and regulatory adaptation insights.","breadcrumb":{"@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#primaryimage","url":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg","contentUrl":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2025\/05\/BCC25.jpg","width":1280,"height":800,"caption":"Panelistas del BCC25 debaten la implementaci\u00f3n de la directiva NIS2 y los retos organizativos que supone su adaptaci\u00f3n"},{"@type":"BreadcrumbList","@id":"https:\/\/www.thesmartcityjournal.com\/en\/cybersecurity\/nis2-at-bcc25-navigating-fragmentation-culture-shifts-and-a-path-to-cyber-resilience#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.thesmartcityjournal.com\/en"},{"@type":"ListItem","position":2,"name":"NIS2 at BCC25: Navigating Fragmentation, Culture Shifts, and a Path to Cyber Resilience"}]},{"@type":"WebSite","@id":"https:\/\/www.thesmartcityjournal.com\/en#website","url":"https:\/\/www.thesmartcityjournal.com\/en","name":"thesmartcityjournal.com","description":"","publisher":{"@id":"https:\/\/www.thesmartcityjournal.com\/en#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thesmartcityjournal.com\/en?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","NewsMediaOrganization"],"@id":"https:\/\/www.thesmartcityjournal.com\/en#organization","name":"thesmartcityjournal.com","url":"https:\/\/www.thesmartcityjournal.com\/en","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesmartcityjournal.com\/en#\/schema\/logo\/image\/","url":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2026\/09\/logo-smart-city-journal-1.png","contentUrl":"https:\/\/www.thesmartcityjournal.com\/wp-content\/uploads\/2026\/09\/logo-smart-city-journal-1.png","width":346,"height":91,"caption":"thesmartcityjournal.com"},"image":{"@id":"https:\/\/www.thesmartcityjournal.com\/en#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thesmartcityjournal","https:\/\/x.com\/SmartCityJour_","https:\/\/www.instagram.com\/thesmartcityjournal_\/","https:\/\/www.tiktok.com\/@thesmartcityjournal","https:\/\/www.linkedin.com\/company\/the-smart-city-journal\/","https:\/\/www.youtube.com\/channel\/UCIPTMzK206pVFxMNjO7SSxw"]},{"@type":"Person","@id":"https:\/\/www.thesmartcityjournal.com\/en#\/schema\/person\/a98d667dd10b0ffa25c2004354cd78e7","name":"Esther Fuldauer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","caption":"Esther Fuldauer"},"url":"https:\/\/www.thesmartcityjournal.com\/en\/author\/esther-fuldauer"},{"@type":"SiteNavigationElement","@id":"https:\/\/www.thesmartcityjournal.com\/en#site-navigation","cssSelector":[".cib-main-menu"]},{"@type":"WPHeader","@id":"https:\/\/www.thesmartcityjournal.com\/en#header","cssSelector":[".cib-header"]},{"@type":"WPFooter","@id":"https:\/\/www.thesmartcityjournal.com\/en#footer","cssSelector":[".cib-footer"]}]}},"_links":{"self":[{"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/posts\/19750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/comments?post=19750"}],"version-history":[{"count":0,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/posts\/19750\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/media\/19747"}],"wp:attachment":[{"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/media?parent=19750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/categories?post=19750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesmartcityjournal.com\/en\/wp-json\/wp\/v2\/tags?post=19750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}