Skip to the text
headlesslaw
Search or jump to a citation
/
Definitions
NIS2 · contents
Recitals
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
Chapter I — General provisions
1
Subject matter
2
Scope
3
Essential and important entities
4
Sector-specific Union legal acts
5
Minimum harmonisation
6
Definitions
Chapter II — Coordinated cybersecurity regulatory frameworks
7
National cybersecurity strategy
8
Competent authorities and single points of contact
9
National cyber crisis management frameworks
10
Computer security incident response teams (CSIRTs)
11
Requirements, technical capabilities and tasks of CSIRTs
12
Coordinated vulnerability disclosure and a European vulnerability database
13
Cooperation at national level
14
Cooperation Group
Chapter III — Cooperation at Union and international level
15
CSIRTs network
16
European cyber crisis liaison organisation network (EU-CyCLONe)
17
International cooperation
18
Report on the state of cybersecurity in the Union
19
Peer reviews
Chapter IV — Cybersecurity risk-management measures and reporting obligations
20
Governance
21
Cybersecurity risk-management measures
22
Union level coordinated security risk assessments of critical supply chains
23
Reporting obligations
24
Use of European cybersecurity certification schemes
25
Standardisation
Chapter V — Jurisdiction and registration
26
Jurisdiction and territoriality
27
Registry of entities
28
Database of domain name registration data
Chapter VI — Information sharing
29
Cybersecurity information-sharing arrangements
30
Voluntary notification of relevant information
Chapter VII — Supervision and enforcement
31
General aspects concerning supervision and enforcement
32
Supervisory and enforcement measures in relation to essential entities
33
Supervisory and enforcement measures in relation to important entities
34
General conditions for imposing administrative fines on essential and important entities
35
Infringements entailing a personal data breach
36
Penalties
37
Mutual assistance
Chapter VIII — Delegated and implementing acts
38
Exercise of the delegation
39
Committee procedure
Chapter IX — Final provisions
40
Review
41
Transposition
42
Amendment of Regulation (EU) No 910/2014
43
Amendment of Directive (EU) 2018/1972
44
Repeal
45
Entry into force
46
Addressees
Annexes
I
SECTORS OF HIGH CRITICALITY
II
OTHER CRITICAL SECTORS
III
CORRELATION TABLE
Implementing acts
Digital & data
Level 2
NIS2
Implementing acts under NIS2, ordered by official identifier.
2024/2690
Implementing act — Cybersecurity risk-management measures
In force