Skip to main content
Shaping Europe’s digital future
Policy and legislation | Publication

NIS2: Commission implementing regulation

This Regulation lays down the technical and the methodological requirements of the measures referred to in NIS2 with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers (the relevant entities).

Text "NIS2 Directive. Rules on cybersecurity of critical entities and networks. #DigitalEU" on dark blue background

After entering into force in January 2023, Member States have to implement the NIS2 Directive into national law by 17 October 2024. The NIS2 Directive lays down the technical and the methodological requirements of cybersecurity risk management measures for critical entities and networks.

Downloads

NIS2 Directive - Commission implementing Regulation C(2024) 7151
Download 
NIS2 Directive - Commission implementing Regulation C(2024) 7151 - ANNEX
Download 

Related content