The EU, in their misguided attempts to regulate everything, invented the NIS and NIS2 directives where the government can interfere in a company's security prac

The EU, in their misguided attempts to regulate everything, invented the NIS and NIS2 directives where the government can interfere in a company's security practices and tell it how to run its business. This is complete and utter non-sense. The sensible approach to so called critical infrastructure would be to just make a company provide free service for a number of days for every hour/day of downtime for preventable errors. Like say the power went out for an hour, you get 100kW of free electricity. You didn't have natural gas for 1 hour, you get 100cm of gas for free. And I find this approach better than having some random person from a government agency with a clipboard and a checklist fining you because you don't have antivirus on your phone or some other stupid thing like this. If there's a sophisticated cyber attack, then the utilities get to walk away scot-free. Just like the insurance company waives all liabilities in case of unforeseen circumstances like war & stuff.