Cybersecurity obligations imposed by the NIS2 Directive (2022/2555/EU) on essential and important entities: risk management, incident notification, technical and organizational measures, governance, supply chain security, training, and management responsibility. Applicable to critical and digital sectors in the European Union.