# NIS2: EU Network and Information Security Directive

> The EU’s cybersecurity directive for essential and important entities across 18 sectors.

URL: https://securei3.com/standards/nis2/
Category: Global & regional laws: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


NIS2 expands EU cybersecurity obligations to many more sectors and makes management bodies accountable for cybersecurity risk measures. Member states have transposed it into national law. We confirm whether you are in scope and use ISO 27001 as the backbone of a compliant programme.

## Who it is for

- Medium and large organisations in sectors such as energy, transport, health, digital infrastructure and manufacturing
- Suppliers to NIS2-regulated entities

## Benefits

- Management accountability made practical
- Incident reporting ready for tight deadlines
- ISO 27001 as an efficient route to compliance

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Is ISO 27001 enough for NIS2?

ISO 27001 covers much of NIS2’s risk management measures, but national laws add requirements such as registration, specific incident reporting timelines and management training. We map the gaps.

Related: https://securei3.com/standards/iso-27001/, https://securei3.com/standards/dora/, https://securei3.com/standards/iso-22301/

Contact: https://securei3.com/contact/: info@securei3.com