Useful links
Official EU resources relevant to the interpretation, application and enforcement of the NIS2 Directive
Official European Union sources specific to the NIS2 Directive that a practitioner is likely to need day to day, grouped by type and ordered by likely usefulness. All links were checked on 19 September 2026 (ePrivacy and PECR links); 18 September 2026 (DPA 2018); 17 September 2026 (UK GDPR); 16 September 2026 (EU sites).
1. The legislation
- Directive (EU) 2022/2555 (NIS 2 Directive), Official Journal text eur-lex.europa.eu
- Consolidated text of Directive (EU) 2022/2555 (incorporating the corrigendum of 22 December 2023) eur-lex.europa.eu
- Commission Implementing Regulation (EU) 2024/2690 on technical and methodological requirements of cybersecurity risk-management measures and significant incidents for digital infrastructure, ICT service management and digital providers (Articles 21(5) and 23(11)) eur-lex.europa.eu
- Proposal for a Directive amending Directive (EU) 2022/2555 as regards simplification measures and alignment with the Cybersecurity Act (January 2026 cybersecurity package) (European Commission) digital-strategy.ec.europa.eu
2. EU-level guidance
- NIS2 Directive policy page (European Commission) digital-strategy.ec.europa.eu
- NIS2 Directive: frequently asked questions (European Commission) digital-strategy.ec.europa.eu
- Commission Guidelines on the application of Article 3(4) (registration of entities) digital-strategy.ec.europa.eu
- Commission Guidelines on the application of Article 4(1) and (2) (relationship with sector-specific Union legal acts) digital-strategy.ec.europa.eu
- NIS2 Directive transposition in EU countries (European Commission) digital-strategy.ec.europa.eu
- Technical implementation guidance on cybersecurity risk-management measures under Implementing Regulation (EU) 2024/2690 (ENISA) enisa.europa.eu
- Cybersecurity roles and skills for NIS2 essential and important entities (ENISA) enisa.europa.eu
3. Notification and reporting platforms
- European Vulnerability Database (EUVD), established under Article 12(2) (ENISA) euvd.enisa.europa.eu
4. Regulators, authorities and bodies
- NIS Cooperation Group (Article 14) (European Commission) digital-strategy.ec.europa.eu
- CSIRTs Network (Article 15) (ENISA) enisa.europa.eu
- EU-CyCLONe, European cyber crisis liaison organisation network (Article 16) (ENISA) enisa.europa.eu
- European Union Agency for Cybersecurity (ENISA) enisa.europa.eu