Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022
On measures for a high common level of cybersecurity across the Union,
amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) (Text with EEA relevance)- Recitals
CHAPTER I — GENERAL PROVISIONS
CHAPTER II — COORDINATED CYBERSECURITY FRAMEWORKS
- Article 7 — National cybersecurity strategy
- Article 8 — Competent authorities and single points of contact
- Article 9 — National cyber crisis management frameworks
- Article 10 — Computer security incident response teams (CSIRTs)
- Article 11 — Requirements, technical capabilities and tasks of CSIRTs
- Article 12 — Coordinated vulnerability disclosure and a European vulnerability database
- Article 13 — Cooperation at national level
CHAPTER III — COOPERATION AT UNION AND INTERNATIONAL LEVEL
CHAPTER IV — CYBERSECURITY RISK-MANAGEMENT MEASURES AND REPORTING OBLIGATIONS
CHAPTER V — JURISDICTION AND REGISTRATION
CHAPTER VI — INFORMATION SHARING
CHAPTER VII — SUPERVISION AND ENFORCEMENT
- Article 31 — General aspects concerning supervision and enforcement
- Article 32 — Supervisory and enforcement measures in relation to essential entities
- Article 33 — Supervisory and enforcement measures in relation to important entities
- Article 34 — General conditions for imposing administrative fines on essential and important entities
- Article 35 — Infringements entailing a personal data breach
- Article 36 — Penalties
- Article 37 — Mutual assistance
CHAPTER VIII — DELEGATED AND IMPLEMENTING ACTS
CHAPTER IX — FINAL PROVISIONS
- Final
- ANNEX I — SECTORS OF HIGH CRITICALITY
- ANNEX II — OTHER CRITICAL SECTORS
- ANNEX III — CORRELATION TABLE