EU tightens cybersecurity of critical infrastructure

Significance

The new rules require EU states to meet stricter supervisory and enforcement measures and harmonise their sanctions, and seek to bolster investment in the cybersecurity of essential services and critical infrastructure. There was strong support for NIS2, members of the European Parliament voting 577 to six in favour.

Impacts

• NIS2 will underline the need to protect critical infrastructure and essential services globally.
• New sectors included under the directive face a sharp learning curve on cybersecurity obligations.
• Tackling ransomware will be a top cybersecurity priority for the EU Agency for Cybersecurity and member states.