To address the growing cyberthreat landscape, the EU has replaced the original NIS Directive with NIS2 (Directive 2022/2555). NIS2 introduces stricter security requirements, strengthens supply chain security, refines reporting obligations and implements tougher supervision and enforcement, including harmonized sanctions across the EU. The new directive has been in force since 18 October 2024, replacing the previous NIS Directive.