What does the name NIS2 Directive mean?
Network and Information Systems Directive (2nd edition)
Milestones
- In 2016, the European Parliament adopted the NIS 1 Directive, oficially published in the Official Journal of the European Union.
- The NIS 1 directive came into effect in 2019.
- A revised version, known as the NIS 2 directive, was adopted and published on November 10, 2022.
- Subsequently, member states were granted 21 months to integrate this European directive into their respective national legislation. To be precise, all EU member states are required to incorporate the NIS 2 directives into their legislation by October 17, 2024, for them to attain enforceability.
- In January 2025, the European Commission adopted specific implementing acts to further clarify the technical and methodological requirements for cybersecurity risk-management and to define precise reporting obligations for digital infrastructure sectors.
- By April 17, 2025, all Member States are required to establish a formal list of essential and important entities, a crucial step that enables national regulators to initiate active supervision and oversight of the identified organizations.
- The period of 2025 through 2026 marks the commencement of the first cycle of “Peer Reviews,” during which Member States and ENISA evaluate the effectiveness of national implementations to ensure a harmonized level of cybersecurity across the European Union.