Skip to the text
Text as of 27 Dec 2022 · Directive (EU) 2022/2555, OJ L 333, 27.12.2022 · Same wording as today’s text.Today’s text

Recital 77

Digital & dataLevel 1DirectiveNIS2Stage: AdoptedOfficial source

Responsibility for ensuring the security of network and information system lies, to a great extent, with essential and important entities. A culture of risk management, involving risk assessments and the implementation of cybersecurity risk-management measures appropriate to the risks faced, should be promoted and developed.