NIS2 (Network and Information Security Directive 2)

NIS2 expands the scope of the original NIS directive to cover more sectors and introduces stricter obligations around risk management, incident reporting, supply chain security, and management accountability. It requires covered organizations to implement appropriate technical and organizational measures to manage cybersecurity risks, and mandates incident reporting to national authorities within defined timeframes. For SOC teams, NIS2 reinforces the need for documented detection and response capabilities.