---
title: "NIS2 Directive (NIS2)"
url: "https://www.engagecompliance.co/law/nis2"
type: "law-index"
date: ""
---
# NIS2 Directive (NIS2)

_Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)_

[Recitals (144)](https://www.engagecompliance.co/law/nis2/recitals)

- [Article 1](https://www.engagecompliance.co/law/nis2/article-1): Subject matter
- [Article 2](https://www.engagecompliance.co/law/nis2/article-2): Scope
- [Article 3](https://www.engagecompliance.co/law/nis2/article-3): Essential and important entities
- [Article 4](https://www.engagecompliance.co/law/nis2/article-4): Sector-specific Union legal acts
- [Article 5](https://www.engagecompliance.co/law/nis2/article-5): Minimum harmonisation
- [Article 6](https://www.engagecompliance.co/law/nis2/article-6): Definitions
- [Article 7](https://www.engagecompliance.co/law/nis2/article-7): National cybersecurity strategy
- [Article 8](https://www.engagecompliance.co/law/nis2/article-8): Competent authorities and single points of contact
- [Article 9](https://www.engagecompliance.co/law/nis2/article-9): National cyber crisis management frameworks
- [Article 10](https://www.engagecompliance.co/law/nis2/article-10): Computer security incident response teams (CSIRTs)
- [Article 11](https://www.engagecompliance.co/law/nis2/article-11): Requirements, technical capabilities and tasks of CSIRTs
- [Article 12](https://www.engagecompliance.co/law/nis2/article-12): Coordinated vulnerability disclosure and a European vulnerability database
- [Article 13](https://www.engagecompliance.co/law/nis2/article-13): Cooperation at national level
- [Article 14](https://www.engagecompliance.co/law/nis2/article-14): Cooperation Group
- [Article 15](https://www.engagecompliance.co/law/nis2/article-15): CSIRTs network
- [Article 16](https://www.engagecompliance.co/law/nis2/article-16): European cyber crisis liaison organisation network (EU-CyCLONe)
- [Article 17](https://www.engagecompliance.co/law/nis2/article-17): International cooperation
- [Article 18](https://www.engagecompliance.co/law/nis2/article-18): Report on the state of cybersecurity in the Union
- [Article 19](https://www.engagecompliance.co/law/nis2/article-19): Peer reviews
- [Article 20](https://www.engagecompliance.co/law/nis2/article-20): Governance
- [Article 21](https://www.engagecompliance.co/law/nis2/article-21): Cybersecurity risk-management measures
- [Article 22](https://www.engagecompliance.co/law/nis2/article-22): Union level coordinated security risk assessments of critical supply chains
- [Article 23](https://www.engagecompliance.co/law/nis2/article-23): Reporting obligations
- [Article 24](https://www.engagecompliance.co/law/nis2/article-24): Use of European cybersecurity certification schemes
- [Article 25](https://www.engagecompliance.co/law/nis2/article-25): Standardisation
- [Article 26](https://www.engagecompliance.co/law/nis2/article-26): Jurisdiction and territoriality
- [Article 27](https://www.engagecompliance.co/law/nis2/article-27): Registry of entities
- [Article 28](https://www.engagecompliance.co/law/nis2/article-28): Database of domain name registration data
- [Article 29](https://www.engagecompliance.co/law/nis2/article-29): Cybersecurity information-sharing arrangements
- [Article 30](https://www.engagecompliance.co/law/nis2/article-30): Voluntary notification of relevant information
- [Article 31](https://www.engagecompliance.co/law/nis2/article-31): General aspects concerning supervision and enforcement
- [Article 32](https://www.engagecompliance.co/law/nis2/article-32): Supervisory and enforcement measures in relation to essential entities
- [Article 33](https://www.engagecompliance.co/law/nis2/article-33): Supervisory and enforcement measures in relation to important entities
- [Article 34](https://www.engagecompliance.co/law/nis2/article-34): General conditions for imposing administrative fines on essential and important entities
- [Article 35](https://www.engagecompliance.co/law/nis2/article-35): Infringements entailing a personal data breach
- [Article 36](https://www.engagecompliance.co/law/nis2/article-36): Penalties
- [Article 37](https://www.engagecompliance.co/law/nis2/article-37): Mutual assistance
- [Article 38](https://www.engagecompliance.co/law/nis2/article-38): Exercise of the delegation
- [Article 39](https://www.engagecompliance.co/law/nis2/article-39): Committee procedure
- [Article 40](https://www.engagecompliance.co/law/nis2/article-40): Review
- [Article 41](https://www.engagecompliance.co/law/nis2/article-41): Transposition
- [Article 42](https://www.engagecompliance.co/law/nis2/article-42): Amendment of Regulation (EU) No 910/2014
- [Article 43](https://www.engagecompliance.co/law/nis2/article-43): Amendment of Directive (EU) 2018/1972
- [Article 44](https://www.engagecompliance.co/law/nis2/article-44): Repeal
- [Article 45](https://www.engagecompliance.co/law/nis2/article-45): Entry into force
- [Article 46](https://www.engagecompliance.co/law/nis2/article-46): Addressees

Source text: EUR-Lex, Official Journal HTML (CELEX 32022L2555). Cross-checked against validated against the anchor articles verified in REP-08.
