What is NIS/NIS2?

NIS (Network and Information Security Directive) was the first EU-wide legislation on cybersecurity. NIS2 is an updated version of this directive, aiming to strengthen cybersecurity requirements, address supply chain security, streamline reporting obligations, and introduce stricter supervisory measures and enforcement requirements. NIS2 covers a wider range of sectors deemed critical, including energy, transport, health, digital infrastructure, public administration, and others. It mandates specific cybersecurity risk management measures and reporting obligations for covered entities, with the goal of improving the overall level of cybersecurity across the EU.