Glossary · Digital policy

What is NIS2?

Also called Network and Information Security Directive.

Definition

NIS2 means: NIS2 is the EU directive setting cybersecurity risk-management and reporting duties for essential and important entities across many sectors. Source: EUR-Lex: NIS2 Directive.

Does this affect your company?

Run a free exposure scan — Lex maps the EU files, deadlines and source records heading your way, every claim cited.

Scan my company →Ask Lex

Why it matters

It widens the scope of EU cybersecurity obligations and depends on national transposition for detailed application.

Related law explainers

NIS232022L2555Read the grounded law explainer →

Related lobbying pages

All lobbying by law →

Who is lobbying on AI Act?Disclosed meetings, counted as contact records, not influence →Who is lobbying on Digital Services Act?Disclosed meetings, counted as contact records, not influence →Who is lobbying on Digital Markets Act?Disclosed meetings, counted as contact records, not influence →

Related glossary terms

Frequently asked

What is NIS2?

NIS2 is the EU directive setting cybersecurity risk-management and reporting duties for essential and important entities across many sectors.

Why does NIS2 matter in EU policy?

It widens the scope of EU cybersecurity obligations and depends on national transposition for detailed application.

Where can I verify the definition of NIS2?

Lex cites EUR-Lex: NIS2 Directive for this definition and links the source records on this page.

Official sources

EUR-Lex: NIS2 Directive ↗

Definitions are short paraphrases of official records, not legal advice. For binding text, use the linked EUR-Lex act, Official Journal or EU institution page.

See your company’s exposure — every claim cited.

Enter your company and Lex builds a cited Exposure Map in about 30 seconds. Free, no login.

Map my exposure — free Ask Lex