Ready for NIS2? – The effects of NIS2 regulation on aerospace SMEs (Members Only)
On 12 November, AeroNL and KPMG will bring our members together at KPMG in The Hague for an afternoon on NIS2 and its implications for organisations in the aerospace and aviation sector.
The European NIS2 directive has applied in the Netherlands since August. It requires organisations that provide essential services and products, including defence companies, to have their own security and that of their suppliers in order. Responsibility for managing cyber risk now lies with the board, not with the IT department.
Why this matters now
On 13 October, NRC reported that European defence companies are facing Russian digital threats more often, and that start-ups entering the sector are particularly vulnerable to espionage and sabotage. In one case described in the article, an ethical hacker hired by a mid-sized Dutch defence company gained administrator rights within a single day, even though the company believed its security was well organised. Under NIS2, carrying out a test is no longer enough: organisations are also legally required to act on the security advice that follows.
What you can expect
We start with the NIS2 agenda: scope, director liability, supervision and the relationship with ISO 27001, DORA and CER. We then look at five gaps that organisations commonly run into during implementation: executive enablement, notification readiness, supplier governance, evidence and audit, and control linkage.
After that, you choose between two parallel sessions. The breakout session is an interactive ransomware simulation covering escalation, classification, board decision-making, the reporting obligation and communication. The plenary session offers a practical approach to scope, governance, supplier risk, audit, evidence and board reporting. We close with a clear question: what should you do tomorrow? The afternoon ends with drinks, where you can talk to the experts and to colleagues from the sector.
Provisional programme
- 14:45 Walk-in and reception
- 15:00 Welcome and introduction by AeroNL and KPMG
- 15:15 The NIS2 agenda
- 15:45 Five implementation gaps
- 16:30 Parallel sessions: Cyber incident under NIS2 or From compliance to resilience
- 17:15 What should you do tomorrow?
- 17:30 Networking drinks
- 19:00 Close
Practical details
- Date: Thursday 12 November 2026
- Time: 14:45 to 19:00
- Location: KPMG, Anna van Buerenplein 44A, The Hague
Who should attend
The afternoon is intended for board members, CIOs, CISOs, IT and operations directors, security managers, compliance officers and risk professionals.
For members only
This event is open exclusively to AeroNL member organisations. Is your organisation not yet a member? Every new membership is subject to board approval, but as an applicant you can take part in our activities in the meantime. Go to Become A Member to register today!
Registration
Register via the button below. We look forward to welcoming you in The Hague and to working with you on a sector that is ready for NIS2. For questions, please contact info@aeronl.com.
