NIS2 Directive Implementing Acts
The NIS2 Directive (EU 2022/2555) Implementing Acts specify detailed cybersecurity risk management measures and significant incident reporting criteria for essential and important entities. The implementing regulation (adopted October 2024) defines technical and methodological requirements for network and information security measures, expanding on the NIS2 Directive's Article 21 risk management obligations.
Domains
Human Resources and Awareness
Vulnerability and Cryptography
Access Control and Authentication
Network Security and Architecture
Supply Chain Security
Frequently Asked Questions
Map NIS2 Directive Implementing Acts to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.