This website uses cookies to enhance the user experience.

NIS2 Implementation by Country

The NIS2 Directive affects all EU member states. Below is an overview of the implementation status, responsible authorities, and approaches across countries. Each country may have specific requirements or timelines in addition to the EU-wide directive.

Austria flag
Austria

Status: In progress

Responsible Authority

Federal Chancellery (Bundeskanzleramt)

Approach

Focusing on critical infrastructure protection and public-private partnerships.

View detailed information
Belgium flag
Belgium

Status: Implemented

Responsible Authority

Centre for Cybersecurity Belgium (CCB)

Approach

Emphasizing cross-sector collaboration and incident response capabilities.

View detailed information
Bulgaria flag
Bulgaria

Status: Planning

Responsible Authority

State e-Government Agency

Approach

Developing a national cybersecurity strategy aligned with NIS2 requirements.

View detailed information
Croatia flag
Croatia

Status: In progress

Responsible Authority

Office of the National Security Council

Approach

Strengthening national CERT capabilities and updating legal frameworks.

View detailed information
Cyprus flag
Cyprus

Status: Planning

Responsible Authority

Digital Security Authority (DSA)

Approach

Focusing on capacity building and enhancing cybersecurity awareness.

View detailed information
Czech Republic flag
Czech Republic

Status: In progress

Responsible Authority

National Cyber and Information Security Agency (NÚKIB)

Approach

Implementing a comprehensive national cybersecurity strategy with emphasis on critical sectors.

View detailed information
Denmark flag
Denmark

Status: Implemented

Responsible Authority

Danish Centre for Cyber Security

Approach

Prioritizing threat intelligence sharing and public-private collaboration.

View detailed information
Estonia flag
Estonia

Status: In progress

Responsible Authority

Information System Authority (RIA)

Approach

Leveraging digital governance expertise to enhance cybersecurity measures.

View detailed information
Finland flag
Finland

Status: Implemented

Responsible Authority

National Cyber Security Centre Finland (NCSC-FI)

Approach

Focusing on resilience and comprehensive security in digital environments.

View detailed information
France flag
France

Status: In progress

Responsible Authority

National Cybersecurity Agency of France (ANSSI)

Approach

Implementing a strategic national plan for cybersecurity with focus on sovereignty.

View detailed information
Germany flag
Germany

Status: In progress

Responsible Authority

Federal Office for Information Security (BSI)

Approach

Emphasizing critical infrastructure protection and supply chain security.

View detailed information
Greece flag
Greece

Status: Planning

Responsible Authority

National Cyber Security Authority

Approach

Developing a national cybersecurity ecosystem and enhancing incident response capabilities.

View detailed information
Hungary flag
Hungary

Status: Planning

Responsible Authority

National Cyber Security Center

Approach

Focusing on modernizing cybersecurity legislation and improving coordination.

View detailed information
Ireland flag
Ireland

Status: In progress

Responsible Authority

National Cyber Security Centre (NCSC)

Approach

Prioritizing protection of critical national infrastructure and enhancing cyber resilience.

View detailed information
Italy flag
Italy

Status: In progress

Responsible Authority

National Cybersecurity Agency

Approach

Implementing a national cybersecurity strategy with focus on digital transformation.

View detailed information
Latvia flag
Latvia

Status: Planning

Responsible Authority

National Information Technology Security Council

Approach

Developing comprehensive cybersecurity policies and enhancing national capabilities.

View detailed information
Lithuania flag
Lithuania

Status: In progress

Responsible Authority

National Cyber Security Centre

Approach

Focusing on strengthening cyber resilience and fostering innovation in cybersecurity.

View detailed information
Luxembourg flag
Luxembourg

Status: Implemented

Responsible Authority

National Commission for Data Protection (CNPD)

Approach

Emphasizing data protection and cybersecurity in the financial sector.

View detailed information
Malta flag
Malta

Status: Planning

Responsible Authority

Malta Information Technology Agency (MITA)

Approach

Developing a national cybersecurity strategy with focus on digital economy protection.

View detailed information
Netherlands flag
Netherlands

Status: Implemented

Responsible Authority

National Cyber Security Centre (NCSC)

Approach

Prioritizing public-private partnerships and international cooperation in cybersecurity.

View detailed information
Poland flag
Poland

Status: In progress

Responsible Authority

NASK National Research Institute

Approach

Implementing a comprehensive cybersecurity strategy with focus on critical infrastructure.

View detailed information
Portugal flag
Portugal

Status: Planning

Responsible Authority

National Cybersecurity Centre

Approach

Developing national cybersecurity capabilities and enhancing international cooperation.

View detailed information
Romania flag
Romania

Status: Planning

Responsible Authority

National Cyberint Center

Approach

Focusing on modernizing cybersecurity infrastructure and improving incident response.

View detailed information
Slovakia flag
Slovakia

Status: In progress

Responsible Authority

National Security Authority (NBU)

Approach

Implementing a national cybersecurity strategy with emphasis on public-private collaboration.

View detailed information
Slovenia flag
Slovenia

Status: Planning

Responsible Authority

Information Security Administration

Approach

Developing comprehensive cybersecurity policies and enhancing national capabilities.

View detailed information
Spain flag
Spain

Status: In progress

Responsible Authority

National Cryptologic Center (CCN)

Approach

Implementing a national cybersecurity strategy with focus on critical infrastructure and digital services.

View detailed information
Sweden flag
Sweden

Status: Implemented

Responsible Authority

Swedish Civil Contingencies Agency (MSB)

Approach

Prioritizing whole-of-society approach to cybersecurity and enhancing international cooperation.

View detailed information

Understanding Country-Specific Implementation

While NIS2 is an EU-wide directive, each member state may have specific implementation details, timelines, or additional requirements. It's crucial to stay informed about both EU-level and country-specific regulations to ensure full compliance.

Explore country-specific resources