NIS2-DIRECTIVE

NIS2 European cybersecurity directive 2024.

Definition

NIS2 covers 18 essential and important sectors (energy, transport, banking, health, water, ICT, postal, food, chemicals manufacturing, research, etc.). Obligations: risk management measures, incident reporting (24h early warning, 72h notification, 1-month full report), supervision by national authorities.

Origin

Adopted 14 December 2022 ; national transposition 17 October 2024.

Example in context

A French water utility under NIS2 notifies ANSSI within 24h of a ransomware locking its SCADA.

Related terms

• DORA — finance counterpart.