{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/recitals/81","url":"https://www.headlesslaw.com/nis2/recitals/81","title":"Recital 81","family":"l1_recital_view","work_id":"nis2","view_of":"/nis2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive (EU) 2022/2555, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","valid_from":"2022-12-27","valid_until":null,"content_id":"b1b1ea5f7da1495e","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/recitals/81/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/recitals/81/versions/2022-12-27/rev/b1b1ea5f7da1495e","versions_url":"https://www.headlesslaw.com/nis2/recitals/81/versions","relations_url":"https://www.headlesslaw.com/nis2/recitals/81/relations","act_url":"https://www.headlesslaw.com/nis2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"nis2","path":"/nis2/recitals","name":"NIS2","number":"Directive (EU) 2022/2555","celex":"32022L2555","title_official":null,"document_date":null},"position":{"kind":"recital","key":"81","index":81,"articles":144,"annexes":0},"prev":{"path":"/nis2/recitals/80","key":"80","title":"Recital 80"},"next":{"path":"/nis2/recitals/82","key":"82","title":"Recital 82"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/nis2/recitals.md","unit_text_sha256":"4c2f5cc5aeec1ae37d1f54ca98af49e4c5ec9d16b4ed2e3c4b311e80cc6d7c33","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"nis2/recitals/rec/81","kind":"recital","key":"81","heading":"","text":"In order to avoid imposing a disproportionate financial and administrative burden on essential and important entities, the cybersecurity risk-management measures should be proportionate to the risks posed to the network and information system concerned, taking into account the state-of-the-art of such measures, and, where applicable, relevant European and international standards, as well as the cost for their implementation.","marks":[],"text_hash":"4c2f5cc5aeec1ae37d1f54ca98af49e4c5ec9d16b4ed2e3c4b311e80cc6d7c33","revision":1,"blocks":[{"locator":"nis2/recitals/rec/81/block/1","text_hash":"4c2f5cc5aeec1ae37d1f54ca98af49e4c5ec9d16b4ed2e3c4b311e80cc6d7c33","revision":1}]}}