Cyprus's NIS2 cybersecurity law now covers roughly ten times more organisations than its predecessor, extending far beyond critical infrastructure into public bodies, postal services, and digital infrastructure.