What is the “Security of Network and Information Systems Directive” (EU 2016/1148)?
Services
Information
The NIS Directive is the first piece of EU-wide cyber-security legislation. It requires Member States to ensure that key public and private entities (so called ‘operators of essential services’) in seven sectors (energy, transport, banking, financial infrastructures, health, drinking water and digital infrastructures) take appropriate security measures and notify significant incidents to national authorities. The Directive places particular emphasis on European cooperation: It establishes best practices and align rules.
The NIS Directive has been adopted in July 2016 and is part of a set of legislative measures aiming to increase cyber-security throughout the Union. It also includes the recently agreed Cybersecurity Act.