Skip to the text

NIS2 › Level 2 › Implementing acts

Commission Implementing Regulation (EU) 2024/2690 of 17 October 2024

laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers (Text with EEA relevance)

Full documentAnnex of 1 · 16 articles

In this act Annex of 1

ANNEX

Digital & dataLevel 2Implementing RegulationNIS2Not shownOfficial source

No text for this date

About this text

Commission Implementing Regulation (EU) 2024/2690 · binding · OJ L, 2024/2690, 18.10.2024 · dated 17 Oct 2024 [in force]

Not shown · No text for this date · — · Official source

Coverage: No English consolidation exists. We hold the text as verified on 26 October 2026; earlier dates show “We don’t hold the text for this date”.
Freshness: Release a4f2a049 published 1 Nov 2026, 17:41 CET. This annex checked word for word against EUR-Lex on 26 Oct 2026.
Shown: No text for this date
Failures: None.
Incomplete: No.
Instrument: Commission Implementing Regulation (EU) 2024/2690
CELEX: 32024R2690
OJ reference: OJ L, 2024/2690, 18.10.2024
Drafted by: Commission
Legal nature: Binding
Legal basis: Article 21(5) and Article 23(11) NIS2
Adopted: 17 October 2024
In force: 7 November 2024
Corrigenda: None in English (CELLAR)
Related instruments: None recorded
Text on this page: Word for word — title, recitals, articles and annexes as in the OJ act; not reproduced: citations, enacting formula, closing formula, signature and OJ footnotes

Time travel