NIS2 for SaaS: minimum checklist for 2026

What NIS2 actually demands from a mid-size SaaS: incident reporting, supply-chain, access control, and 3 basic rules we run ourselves.