NIS2 Directive

The NIS2 Directive (Directive (EU) 2022/2555) is the EU's main cybersecurity legislation. It expands the scope of NIS1 to cover 18 critical and important sectors, introduces stricter risk-management duties under Article 21, and adds supply-chain due-diligence and incident-reporting requirements.

See NIS2 and VDRs.

Last updated: May 2026.