Cyprus has now fully transposed Directive 2016/1148 on security
of network and information systems (the "NIS
Directive"), through the Security of Networks and
Information Systems Law of 2020 (Law 89(I)/2020) (the
"Cyprus NIS Law"), which came into force
on 12 August 2020.
While the text of the NIS Directive has generally been
transposed into the Cypriot legal order, the Cyprus NIS Law also
specifically addresses network and information security
requirements for electronic communication services provides (i.e.
telecommunications operators).
The Cyprus NIS Law creates a framework for security of network
and information systems in all critical information infrastructures
in Cyprus and enhances the island State's existing capabilities
of handling and responding to cyberattacks. The key purpose
of the Cyprus NIS Law and its subsidiary legislation is to ensure
that the Cypriot network infrastructure can respond to cyberattacks
and other cybersecurity threats.
