NIS2

NIS2 is Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union. It establishes obligations for covered essential and important entities concerning risk-management measures, governance, incident reporting and supervision, while Member States implement it through national law. Applicability depends on sector, entity type, size, jurisdiction and specific rules; supplying technology to a covered customer does not automatically place every provider in the same category. Compliance requires organisational and technical evidence, supplier-risk management, continuity and reporting processes rather than one certificate or tool. A glossary cannot determine whether an organisation is in scope. The current directive, national implementing law and competent guidance should be checked for each legal entity, service and country, with qualified advice where needed.