Glossary · Regulation

NIS2

Directive (EU) 2022/2555 on network and information security

Updated

NIS2 is the EU cybersecurity directive, transposed into national law from October 2024, that makes healthcare providers and some health-tech suppliers "essential" or "important" entities with risk-management and incident-reporting duties.

The incident clock is 24 hours for an early warning and 72 hours for a notification, with management personally accountable.

Official source

Directive (EU) 2022/2555 (EUR-Lex)

See also

Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →