Skip to main content
All glossary terms

Regulation & risk

NIS2 Directive

The NIS2 Directive is a European Union directive concerning cybersecurity and resilience for covered entities in specified sectors. It establishes a framework that member states implement through national law, so the detailed rules relevant to an organization may depend on local implementation.

Also known as NIS2.

Why it matters in practice

NIS2 is used in cybersecurity and risk discussions, but the directive’s title alone does not establish whether an entity is in scope. Organizations need to consider the relevant sector, entity characteristics, national measures, and current legal guidance. This summary intentionally avoids listing deadlines or asserting coverage.

Example

A security team asks local counsel to check its organization’s sector and national implementation before changing its incident-governance process.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.