The Nis2 directive considerably broadens the scope of entities subject to cybersecurity obligations. At a time when systems are becoming more interconnected, the Institut luxembourgeois de régulation (ILR), the regulatory authority for the players concerned, is stressing the need for proactive preparation and structured support to strengthen collective resilience.