Directive (EU) 2022/2555 replaced the original NIS Directive and had to be transposed into national law by 17 October 2024. Article 21 lists the security measures, including supply-chain security, and Article 23 sets reporting deadlines starting with an early warning within 24 hours.
The NIS2 framework page covers scope and requirements.
Read more
Related terms
- DORA
- DORA is the EU Digital Operational Resilience Act, which sets ICT risk, incident, testing and third-party risk requirements for financial entities.
- Third-party risk management
- Third-party risk management is the work of identifying, assessing and monitoring the risks that vendors and other third parties bring to an organization.
- EU AI Act
- The EU AI Act is the EU regulation setting obligations for AI systems by risk, from prohibited practices to high-risk systems and transparency duties.