NIS 2 – Essential And Important Information For Essential And Important Entities

Introduction

Major new legal requirements will place specific cybersecurity obligations on companies across Ireland's economy by the end of this year. While the existing Network and Information Security Directive has flown under the radar for many Irish companies, stiff penalties and enhanced obligations on directors should put its successor right at the top of the agenda.

By no later than 17 October 2024, Ireland is required to implement the second Network and Information Security Directive (EU) 2022/2555 ("NIS 2"). NIS 2 will repeal its predecessor, Directive (EU) 2016/1148 ("NIS 1"), which served as the first EU-wide piece of cybersecurity legislation.

Scope

Like the earlier legislation, NIS 2 is focused on enhancing cybersecurity preparedness within specific sectors of the economy and they key players within them that are deemed either 'essential' or 'important' to the economy of the State. Notably, this includes sectors such as