Glossary
NIS2 Directive
The EU's Directive (EU) 2022/2555, the updated cybersecurity law covering critical sectors across the Union.
Explained in depth: NIS2 overview
Adopted in December 2022 and enforceable since 18 October 2024, NIS2 replaces the original 2016 NIS Directive, expanding coverage to 18 sectors and introducing stricter incident reporting and management accountability requirements. Because it is a directive, the binding rules an organisation actually follows are the national implementing acts, which can extend scope and add sanctions.