// definition
NIS2
EU directive on organisational cybersecurity
Short definition
Directive (EU) 2022/2555 establishing cybersecurity risk-management and incident-reporting requirements for entities within its scope. Classification depends on sector, activities, size and specific statutory rules. National implementation must be checked in each member state; a customer’s contractual security requirement has a separate scope.
risk atlas
Knowledge map
Related analyses
Primary sources
- Directive (EU) 2022/2555Articles 2–3, 20–23 and Annexes I–II: scope, risk management and reporting.