Rules specifying the obligations laid down in Articles 21(5) and 23(11) of the NIS 2 Directive
Digital economy and society
The NIS2 Directive strengthens cybersecurity risk-management measures and streamlines incident-reporting obligations for entities in its scope. Given the cross-border nature of certain entities from the digital infrastructure, ICT service management and digital providers sectors, NIS2 provides that they should be subject to a high degree of harmonisation at EU level, facilitated by an implementing act. This act will also specify the cases when an incident shall be considered to be significant.
Links
ID: 14241