Art. 1 Subject matter | NIS 2 directive |

1. This Directive lays down measures that aim to achieve a high common level of cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; across the Union, with a view to improving the functioning of the internal market.
1. To that end, this Directive lays down:
  1. obligations that require Member States to adopt national cybersecurity strategies means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;and to designate or establish competent authoritiesas defined in Article 46, cyber crisis management authorities, single points of contact on cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; (single points of contact) and computer security incident means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; response teams (CSIRTscomputer security incident response teams);
  2. cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures and reporting obligations for entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; of a type referred to in Annex I or II as well as for entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; identified as critical entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; under Directive (EU) 2022/2557;
  3. rules and obligations on cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; information sharing;
  4. supervisory and enforcement obligations on Member States.