{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/recitals/49","url":"https://www.headlesslaw.com/nis2/recitals/49","title":"Recital 49","family":"l1_recital_view","work_id":"nis2","view_of":"/nis2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive (EU) 2022/2555, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","valid_from":"2022-12-27","valid_until":null,"content_id":"c6f3e24dc9abc996","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/recitals/49/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/recitals/49/versions/2022-12-27/rev/c6f3e24dc9abc996","versions_url":"https://www.headlesslaw.com/nis2/recitals/49/versions","relations_url":"https://www.headlesslaw.com/nis2/recitals/49/relations","act_url":"https://www.headlesslaw.com/nis2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"nis2","path":"/nis2/recitals","name":"NIS2","number":"Directive (EU) 2022/2555","celex":"32022L2555","title_official":null,"document_date":null},"position":{"kind":"recital","key":"49","index":49,"articles":144,"annexes":0},"prev":{"path":"/nis2/recitals/48","key":"48","title":"Recital 48"},"next":{"path":"/nis2/recitals/50","key":"50","title":"Recital 50"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/nis2/recitals.md","unit_text_sha256":"b976846e04fe431e0f529870bed549b9839f06faaac750f4ba55f36712c7a056","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"nis2/recitals/rec/49","kind":"recital","key":"49","heading":"","text":"Cyber hygiene policies provide the foundations for protecting network and information system infrastructures, hardware, software and online application security, and business or end-user data upon which entities rely. Cyber hygiene policies comprising a common baseline set of practices, including software and hardware updates, password changes, the management of new installs, the limitation of administrator-level access accounts, and the backing-up of data, enable a proactive framework of preparedness and overall safety and security in the event of incidents or cyber threats. ENISA should monitor and analyse Member States’ cyber hygiene policies.","marks":[],"text_hash":"b976846e04fe431e0f529870bed549b9839f06faaac750f4ba55f36712c7a056","revision":1,"blocks":[{"locator":"nis2/recitals/rec/49/block/1","text_hash":"b976846e04fe431e0f529870bed549b9839f06faaac750f4ba55f36712c7a056","revision":1}]}}