{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["NIS2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/nis2/recitals/89","url":"https://www.headlesslaw.com/nis2/recitals/89","title":"Recital 89","family":"l1_recital_view","work_id":"nis2","view_of":"/nis2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive (EU) 2022/2555, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","valid_from":"2022-12-27","valid_until":null,"content_id":"6191b1237e2fa4ad","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/nis2/recitals/89/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/nis2/recitals/89/versions/2022-12-27/rev/6191b1237e2fa4ad","versions_url":"https://www.headlesslaw.com/nis2/recitals/89/versions","relations_url":"https://www.headlesslaw.com/nis2/recitals/89/relations","act_url":"https://www.headlesslaw.com/nis2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"nis2","path":"/nis2/recitals","name":"NIS2","number":"Directive (EU) 2022/2555","celex":"32022L2555","title_official":null,"document_date":null},"position":{"kind":"recital","key":"89","index":89,"articles":144,"annexes":0},"prev":{"path":"/nis2/recitals/88","key":"88","title":"Recital 88"},"next":{"path":"/nis2/recitals/90","key":"90","title":"Recital 90"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/nis2/recitals.md","unit_text_sha256":"135d668c788af93ea523c935aa650e9d436e206653095d5dfe2d8f48740d7923","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"nis2/recitals/rec/89","kind":"recital","key":"89","heading":"","text":"Essential and important entities should adopt a wide range of basic cyber hygiene practices, such as zero-trust principles, software updates, device configuration, network segmentation, identity and access management or user awareness, organise training for their staff and raise awareness concerning cyber threats, phishing or social engineering techniques. Furthermore, those entities should evaluate their own cybersecurity capabilities and, where appropriate, pursue the integration of cybersecurity enhancing technologies, such as artificial intelligence or machine-learning systems to enhance their capabilities and the security of network and information systems.","marks":[],"text_hash":"135d668c788af93ea523c935aa650e9d436e206653095d5dfe2d8f48740d7923","revision":1,"blocks":[{"locator":"nis2/recitals/rec/89/block/1","text_hash":"135d668c788af93ea523c935aa650e9d436e206653095d5dfe2d8f48740d7923","revision":1}]}}