Article 1

Subject matter

1.   This Directive lays down measures that aim to achieve a high common level of cybersecurity across the Union, with a view to improving the functioning of the internal market.

2.   To that end, this Directive lays down:

(a)

obligations that require Member States to adopt national cybersecurity strategies and to designate or establish competent authorities, cyber crisis management authorities, single points of contact on cybersecurity (single points of contact) and computer security incident response teams (CSIRTs);

(b)

cybersecurity risk-management measures and reporting obligations for entities of a type referred to in Annex I or II as well as for entities identified as critical entities under Directive (EU) 2022/2557;

(c)

rules and obligations on cybersecurity information sharing;

(d)

supervisory and enforcement obligations on Member States.

Frequently Asked Questions

The main goal of the NIS2 directive is to establish high common cybersecurity standards across all EU member states, ensuring better digital protection and strengthening the single market by aligning rules and responses to cyber risks uniformly across borders, helping the European Union function more smoothly and securely.
According to NIS2, all EU countries must create comprehensive national cybersecurity strategies, establish or designate authorities responsible for cybersecurity, set up emergency cyber incident response teams (CSIRTs), and choose a single point of contact to coordinate cybersecurity matters within the country, ensuring preparedness and improving communication between nations during cyber incidents.
Entities listed in Annex I or II, including critical service providers identified under Directive (EU) 2022/2557, are required to implement strict cybersecurity measures and report incidents; importantly, these organizations play key roles in society, such as energy providers or transport services, thus needing stronger rules to prevent disruptions and protect citizens.
Yes, NIS2 specifically promotes the exchange of cybersecurity information, setting clear rules and obligations to encourage EU countries and relevant entities to transparently share timely information about cyber threats, thereby improving the collective response to incidents and raising awareness to effectively prevent and reduce cyber incidents across the Union.

NIS2 Training

Book Demo

We will get back to you via email as soon as possible.