Skip to content

The regulation stipulates that not only incidents, but threats must be reported to relevant national authorities.

Responding to many systemic supply chain attacks via third-party vendors, the regulation outlines mandatory guidelines to conduct security audits and risk assessments.

Under NIS2, organizations are required to introduce stricter risk management requirements and data security measures.

What is the Network And Information Security Directive (NIS2)?

The NIS2 Directive is a piece of European Union legislation that aims to strengthen cybersecurity across the bloc. It builds upon the original NIS Directive, expanding its scope and strengthening requirements to better address evolving cyber threats. NIS 2 mandates stricter risk management, incident response and reporting, and information security practices for a wider range of sectors, including essential and important entities.

By implementing these measures, NIS2 aims to enhance the collective resilience of EU member states against cyberattacks and ensure a high common level of security for network and information systems across the Union. NIS2 represents a considerable expansion of the EU’s cybersecurity regulatory framework. While it’s not a new framework, there are significant additional elements that make compliance a challenging prospect for organizations of any size.