Industry associations say implementation of the European NIS2 cybersecurity directive will require thousands of medium-sized companies to make costly security upgrades or face potentially large fines.