The NIS2 Directive supports the use of European and international standards and technical specifications to ensure the uniform implementation of cybersecurity risk management measures across all EU Member States.

The directive encourages Member States to promote these standards and specifications without imposing obligations or favoring specific technologies.

To support the adoption of standards, ENISA, in collaboration with Member States and stakeholders, will develop guidance documents and guidelines. These documents will address the following aspects:

• Technical areas to be considered in relation to the use of standards.
• Existing standards, including national ones, that could be applied to such areas.

The objective of the directive is to promote the adoption of common security practices, fostering interoperability and reducing the fragmentation of cybersecurity efforts across the EU. For organizations that need to translate these requirements into concrete actions, a structured path for NIS2 compliance helps to identify the measures to be implemented and to maintain compliance over time.

The sources do not mention specific international cybersecurity standards promoted by the NIS2 Directive.