NIS2 requires regular risk analyses, the development and continuous improvement of security measures and plans for business continuity and crisis management. There is a particular focus on cloud and supply chain security.