The EUs NIS directive is now in place. What next?