Skip to the text
Text as of 27 Dec 2022 · Directive (EU) 2022/2555, OJ L 333, 27.12.2022 · Same wording as today’s text.Today’s text

Recital 137

Digital & dataLevel 1DirectiveNIS2Stage: AdoptedOfficial source

This Directive should aim to ensure a high level of responsibility for the cybersecurity risk-management measures and reporting obligations at the level of the essential and important entities. Therefore, the management bodies of the essential and important entities should approve the cybersecurity risk-management measures and oversee their implementation.