Directive (EU) 2022/2555 on the security of network and information systems in the European Union, which replaces the previous NIS and expands the scope to essential and important entities in critical sectors. Introduces obligations for cyber risk management, incident notification, corporate governance, and cooperation between Member States through national CSIRTs and the NIS Cooperation Group.