Versions Compared

Old Version 16

changes.mady.by.user Alf Moens

Saved on

compared with

New Version Current

changes.mady.by.user Alf Moens

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The NIS-2 directive will regulate both on national level and on organisation level. As the directive is a EU directive it is primarily applicable on EU member states. Some associated members (like Norway) will probable also transpose the directive into national legislation.

February/March 2023: action needed from each NREN

NRENs need to continuously seek dialogue with there their national implementation coordinator in order to discuss there their position. Due to the nature of NREN-business national coordinators might need assistance in deciding upon the position of the NREN.


The first GÉANT infoshare on NIS-2 was in 2021 as an introduction to teh upcomingg the upcoming legislation related to the EU Security Union.

...

GEANT Infoshare III on NIS-2 on March 28th, 2023, 13.00 CEST: https://events.geant.org/event/1386/

GÉANT Infoshare IV on NIS-2 on July 11th, 2023, 13.00 CEST

GÉANT Infoshare V on NIS-2 on November 27th, 2023, 13.00 CET: https://events.geant.org/event/1571/ 

GÉANT Infoshare VI on NIS-2 on March 18th, 2024, 14.00 CET: https://events.geant.org/event/1594/

GÉANT Infoshare VII on NIS-2 on June 24th, 2024, 14.00 CEST: https://events.geant.org/event/1682/

GÉANT Infoshare VIII on NIS-2 on December 5th, 2024, 14.00 CET, register here: https://events.geant.org/event/13861812/

References

DescriptionLocation/linkdate
NIS-2 directive  (EU 2022/2555) full text/ all languages

https://eur-lex.europa.eu/eli/dir/2022/2555/oj

14 dec 2022
Blogpost Andrew Cormack (focus on incident respons cooperation)

https://regulatorydevelopments.jiscinvolve.org/wp/2023/01/05/nis-2-directive-cybersecurity-improvement-for-all/

5 Jan 2023
GÉANT NIS-2 Infoshare II - 11 January 2023Slides presentation Alf Moens and Edit Herczog, the recording can be found here.11 jan 2023
Publication on 2nd Infosharehttps://connect.geant.org/2023/01/17/eu-security-union-2nd-infoshare

17 jan 2023

What does the NIS-2 directive cover for a member state?

A large part of the NIS-2 directive is about what member states themselves need to do on national level. These cover subjects like National Security Strategy, CSIRTs and the implementation of the NIS-2 in the member state.

What is the impact of NIS-2 for an NREN

(work in progress)

What is the impact of NIS-2 for an university?

NIS2 for NRENs - A Call to Action

  • GÉANT has asked Stratix to develop a position paper to facilitate effective responses to the implementation of the Directive in different countries. This position paper is intended to assist organisations by providing insights into the key issues, risks and potential responses to NIS2. It includes a brief introduction to the directive, potential issues for NRENs, solutions and recommendations to consider. 
Stratix: NIS2 for NRENs - A Call to Action

12 july 2023

NCSC Ireland: A quick guide to NIS2NIS 2 Quick reference guide.pdf

21 oct 2023

DG CNECT has issued Guidelines to Member States on:

  • on the application of Article 3(4) of Directive (EU) 2022/2555 (NIS 2 Directive): specific section on domain name registration services. Member states are required to establish a list of essential and important entities as well as entities providing domain name registration services by April 17, 2025
  • on the application of Article 4 (1) and (2) of Directive (EU) 2022/2555 (NIS 2 Directive): relationship between NIS-2 and current and futiure sector-specific legal acts addressing cybersecurity risk-management

https://digital-strategy.ec.europa.eu/en/library/commission-guidelines-application-article-34-directive-eu-20222555-nis-2-directive


https://digital-strategy.ec.europa.eu/en/library/commission-guidelines-application-article-4-1-and-2-directive-eu-20222555-nis-2-directive

14 sep 2023

NIS 2 Self-assessment Netherlands

  • The Dutch government is working on incorporating NIS2 into national law. Organisations are advised to proactively assess risks and implement security measures in advance of regulatory clarity. A self-assessment questionnaire is provided (see link) to determine whether an organisation falls under the NIS2 Directive. The government is encouraging early preparation for compliance and business continuity.

Website of the dutch national cybersecurity center on NIS2:

"What will the NIS2 guideline mean for your organization?"

with a NIS2 self-assessment questionnaire:

https://regelhulpenvoorbedrijven.nl/NIS-2-NL/


14 nov 2023

Report on cybersecurity and resiliency of Europes communications infrastructures

https://digital-strategy.ec.europa.eu/en/library/report-cybersecurity-and-resiliency-eu-communications-infrastructures-and-networks

21 feb 2024

Cybersecurity risk management & reporting obligations for digital infrastructure, providers and ICT service managers

The first implementing act has been proposed. As regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant. It is open for comment for a month until 25 July 2025.

https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14241-Cybersecurity-risk-management-reporting-obligations-for-digital-infrastructure-providers-and-ICT-service-managers_en

27 jun 2024

Draft Guidance on cybersecurity measures - ENISA

Draft guidance ENISA - NIS2

Oct 2024

Dutch implementation of NIS2 legislation scheduled for Q2-2026

https://www.ncsc.nl/actueel/nieuws/2025/06/17/wetsvoorstel-cbw-ingediend-bij-tweede-kamer (in Dutch)

June 2025


National implementations

CountryDetails
Belgiumwww.cyfun.eu
Finlandhttps://valtioneuvosto.fi/en/projects-and-legislation/project?tunnus=LVM027:00/2023
Germany

https://www.bsi.bund.de/dok/408936

Greece

The Greek Cybersecurity Framework consists of:

a) the law 4577/2018 and the ministerial decision 1027/2019; 4854

b) the Cybersecurity Handbook available at: https://mindigital.gr/wp-content/uploads/2022/09/Cybersecurity- 4855 Handbook-English-version.pdf; and 4856

c) the self-assessment tool, available at: https://mindigital.gr/wp-content/uploads/2022/11/Cybersecurity-Self- 4857 Assessment-Tool-English-version.zip . 4858

Netherlands

https://www.ncsc.nl/over-ncsc/wettelijke-taak/wat-gaat-de-nis2-richtlijn-betekenen-voor-uw-organisatie

https://www.ncsc.nl/actueel/nieuws/2025/06/17/wetsvoorstel-cbw-ingediend-bij-tweede-kamer

Portugal

https://www.cncs.gov.pt/en/quadro-nacional/

https://www.cncs.gov.pt/docs/qnrcs-web-eng.pdf

Spain

https://ens.ccn.cni.es/es/docman/documentos-publicos/39-boe-a-2022-7191-national-security-framework-ens/file

...