Recital 13 Cybersecurity for excluded entities

Given the intensification and increased sophistication of cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;, Member States should strive to ensure that entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; that are excluded from the scope of this Directive achieve a high level of cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; and to support the implementation of equivalent cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures that reflect the sensitive nature of those entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations;.