NIS2
On this page
NIS2 European cybersecurity directive 2024.
Definition
NIS2 covers 18 essential and important sectors (energy, transport, banking, health, water, ICT, postal, food, chemicals manufacturing, research, etc.). Obligations: risk management measures, incident reporting (24h early warning, 72h notification, 1-month full report), supervision by national authorities.
Origin
Adopted 14 December 2022 ; national transposition 17 October 2024.
Example in context
A French water utility under NIS2 notifies ANSSI within 24h of a ransomware locking its SCADA.
Related terms
- DORA — finance counterpart.