Published: October 18th, 2024,
Last updated: May 28th, 2025

On Thursday, the EU Commission adopted the first implementing provisions on the cybersecurity of critical facilities and networks under the NIS2 Directive. It contains detailed measures for cybersecurity risk management and for significant security incidents. Companies that provide digital infrastructures and services are to report such cases to the national authorities.