NIS2 directive: the biggest game changer since the GDPR