NIS2 Glossary

The Network and Information Systems Security Directive 2, an EU-wide legislation on cybersecurity.

Organizations in critical sectors that are subject to stricter supervisory regime under NIS2.

Organizations that are subject to lighter supervisory regime under NIS2.

Any event having an actual adverse effect on the security of network and information systems.

Computer Security Incident Response Team, responsible for risk and incident handling.

Actions taken to identify, assess, and mitigate cybersecurity risks.

Measures to ensure the security of the entire supply chain, including third-party services and software.

The process of identifying, analyzing, and evaluating cybersecurity risks.

A documented approach to addressing and managing the aftermath of a security breach or attack.

European Union Agency for Cybersecurity, which supports EU countries in improving their cybersecurity.

National bodies responsible for cybersecurity and the implementation of NIS2.

Operators of Essential Services, critical organizations in sectors like energy, transport, and healthcare.

Digital Service Providers, including online marketplaces, search engines, and cloud computing services.

An incident with a considerable impact on the services or operations of an entity.

Information about threats and threat actors that helps mitigate harmful events in cyberspace.