The NIS2 Directive (Directive (EU) 2022/2555) is the European Union’s enhanced cybersecurity law, adopted in 2022 to strengthen the security of network and information systems across critical sectors. It replaces the original NIS Directive and expands its scope, coverage, and enforcement powers.
NIS2 applies to a broader set of essential and important entities across sectors such as
banking, energy, healthcare, telecom, transportation, cloud services, public administration, and digital infrastructure. It sets baseline security standards and incident reporting obligations to improve the EU's collective cyber resilience.