Fulfillment of the obligations of the NIS2 directive, which extends cybersecurity requirements to a broader perimeter of public and private entities compared to the previous NIS. Includes risk assessment, proportionate security measures, incident management, supply chain, and management responsibility.