{"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":null,"checked_against":null},"truncation":{"shown":12,"total":12,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/nis2/articles/21","url":"https://www.headlesslaw.com/nis2/articles/21","title":"Article 21 — Cybersecurity risk-management measures","work_id":"nis2","date_state":"past","as_of":"2023-01-16","relations_url":"https://www.headlesslaw.com/nis2/articles/21/relations"},"as_of":"2023-01-16","counts":{"refers_to:out":3,"refers_to:in":9},"relations":[{"edge_id":"546ddf45179d374f1b17","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 22(1)","dst_raw":"eu.nis2.article.22","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/22","url":"/nis2/articles/22","title":"Union level coordinated security risk assessments of critical supply chains","key":"22","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.21","source_block_id":"eu.nis2.article.21.paragraph.3"}},{"edge_id":"29d5bb5ee39f4cfa0375","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 14(4)","dst_raw":"eu.nis2.article.14","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/14","url":"/nis2/articles/14","title":"Cooperation Group","key":"14","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.21","source_block_id":"eu.nis2.article.21.paragraph.5"}},{"edge_id":"7ab389e64593ae1427e2","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 39(2)","dst_raw":"eu.nis2.article.39","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/39","url":"/nis2/articles/39","title":"Committee procedure","key":"39","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.21","source_block_id":"eu.nis2.article.21.paragraph.5"}},{"edge_id":"042a9def9686641d6f2a","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/34/para/4","url":"/nis2/articles/34#p-4","title":"General conditions for imposing administrative fines on essential and important entities","key":"34(4)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.34","source_block_id":"eu.nis2.article.34.paragraph.4"}},{"edge_id":"1c596db5bdb0e54e47c0","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/24/para/1","url":"/nis2/articles/24#p-1","title":"Use of European cybersecurity certification schemes","key":"24(1)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.24","source_block_id":"eu.nis2.article.24.paragraph.1"}},{"edge_id":"63f094024d4bbd523203","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/34/para/5","url":"/nis2/articles/34#p-5","title":"General conditions for imposing administrative fines on essential and important entities","key":"34(5)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.34","source_block_id":"eu.nis2.article.34.paragraph.5"}},{"edge_id":"6d6f379c5627adc85071","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21(1)","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/4/para/2/pt/a","url":"/nis2/articles/4#p-2-a","title":"Sector-specific Union legal acts","key":"4(2)(a)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.4","source_block_id":"eu.nis2.article.4.paragraph.2.point.a"}},{"edge_id":"9f5350bd90cd0aa5841b","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/33/para/4/pt/d","url":"/nis2/articles/33#p-4-d","title":"Supervisory and enforcement measures in relation to important entities","key":"33(4)(d)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.33","source_block_id":"eu.nis2.article.33.paragraph.4.point.d"}},{"edge_id":"b34fa5c57310aa5706ab","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/32/para/4/pt/d","url":"/nis2/articles/32#p-4-d","title":"Supervisory and enforcement measures in relation to essential entities","key":"32(4)(d)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.32","source_block_id":"eu.nis2.article.32.paragraph.4.point.d"}},{"edge_id":"c5317bf70f61985cb40f","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/2/para/8","url":"/nis2/articles/2#p-8","title":"Scope","key":"2(8)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.2","source_block_id":"eu.nis2.article.2.paragraph.8"}},{"edge_id":"d73eed2a5fbc223461cb","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21(1)","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/25/para/1","url":"/nis2/articles/25#p-1","title":"Standardisation","key":"25(1)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.25","source_block_id":"eu.nis2.article.25.paragraph.1"}},{"edge_id":"ec666011677fd0caadc6","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 21","dst_raw":"eu.nis2.article.21","other":{"work_id":"nis2","level":"L1","locator":"nis2/art/20/para/1","url":"/nis2/articles/20#p-1","title":"Governance","key":"20(1)","state_on_date":"in_force"},"evidence":{"object":"eu.nis2.legal_text.article.20","source_block_id":"eu.nis2.article.20.paragraph.1"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}