The main objective of the NIS2 Directive is to strengthen the overall level of cybersecurity in the EU in order to improve the functioning of the internal market.

The NIS2 Directive aims to achieve this goal by ensuring that Member States are prepared to handle cyber threats, promoting cooperation between Member States, and encouraging a culture of security in sectors vital to the EU’s economy and society.

The NIS2 Directive updates the 2016 EU cybersecurity rules to reflect the current digital landscape. It expands upon the three main pillars of the previous NIS Directive:

• Requiring Member States to adopt a national cybersecurity strategy
• Establishing the NIS Cooperation Group
• Ensuring the adoption of cybersecurity measures in sectors vital to the economy and society

For organizations falling within the scope of the directive, the first concrete step is to assess their level of compliance: the NIS2 compliance path involves an analysis of measures already implemented, the identification of gaps, and a structured intervention plan. You can consult the official text of the NIS2 Directive to directly verify the applicable obligations.