{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-07", "fingerprint": "ewai:se:d88dc4", "proof": "sha256:e5940e7f12a345eaba1f3ce97df55549e6bdde785abd8de287c7194cf21c8209", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "object_type": "action_kit", "object_id": "action_kit:eu:nis2", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/action_kit", "url": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2", "judgment": { "id": "eu:nis2", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:nis2" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:nis2", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:nis2", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:nis2", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:nis2", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:nis2", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:nis2", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:nis2", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:nis2", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:nis2", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:nis2", "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:nis2", "sanction": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:nis2", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:nis2", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:nis2", "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:nis2", "provision_link": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:nis2", "brief": "https://legal.exploreworldai.com/api/public/v1/obj/brief/eu:nis2", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:nis2", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:nis2", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:nis2", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:nis2", "answer_node": "https://legal.exploreworldai.com/api/public/v1/obj/answer_node/eu:nis2", "exception": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:nis2", "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:nis2", "package": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:nis2", "case_kit": "https://legal.exploreworldai.com/api/public/v1/obj/case_kit/eu:nis2", "documentation_requirement": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:nis2", "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:nis2" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:nis2", "item": { "coverage": { "complete": 5, "total": 5, "label": "5 of 5 answers ready" }, "subject": "eu:nis2", "act": "nis2", "article": null, "actions": [ { "obligation": "obligation:eu:nis2-art-21-essential-entity", "verification": "design", "sanctions": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ] }, { "obligation": "obligation:eu:nis2-art-23-essential-entity", "verification": "authority_filing", "sanctions": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ] }, { "obligation": "obligation:eu:nis2-art-20-management-body", "verification": "governance", "sanctions": [] } ], "answers": [ { "key": "what_to_do", "status": "ready", "sha256": "495ec60f8f64483d457678fb336fb135494652dc8bcf09e3bc1dc7b44ca2bd4e" }, { "key": "who", "status": "ready", "sha256": "37abac59218f114209e611359ba655fe45501ab484f0b520c6b17eb611d1f291" }, { "key": "verification", "status": "ready", "sha256": "5275da4156ad283655950a56bb2c730d5207f94b95d1eb0f081ce3374ece2e6f" }, { "key": "documents", "status": "ready", "sha256": "f32f0177a20e02f8739b30e561ef8cd67cbdec23b60c1a3b3877c4758c41a5dc" }, { "key": "if_not_met", "status": "ready", "sha256": "660c4a3c82272c0fb04e9e2d1acd9a396809ee0a62420f891c79eb686266a782" } ], "answers_full": [ { "key": "what_to_do", "status": "ready", "answer": "Take appropriate cybersecurity risk-management measures. Report significant incidents within the set deadlines. Approve the risk-management measures and follow training.", "ids": [ "obligation:eu:nis2-art-21-essential-entity", "obligation:eu:nis2-art-23-essential-entity", "obligation:eu:nis2-art-20-management-body" ], "question": "What must I do?", "sha256": "495ec60f8f64483d457678fb336fb135494652dc8bcf09e3bc1dc7b44ca2bd4e" }, { "key": "who", "status": "ready", "answer": "Responsible roles: essential-entity, management-body.", "ids": [ "obligation:eu:nis2-art-21-essential-entity", "obligation:eu:nis2-art-23-essential-entity", "obligation:eu:nis2-art-20-management-body" ], "question": "Who is responsible?", "sha256": "37abac59218f114209e611359ba655fe45501ab484f0b520c6b17eb611d1f291" }, { "key": "verification", "status": "ready", "answer": "Verified by: design, authority_filing, governance. Internal review maps each requirement to an implemented measure.", "ids": [ "verification:design", "verification:authority_filing", "verification:governance" ], "question": "How is this verified?", "sha256": "5275da4156ad283655950a56bb2c730d5207f94b95d1eb0f081ce3374ece2e6f" }, { "key": "documents", "status": "ready", "answer": "Keep: Requirement-to-measure mapping, Internal review note, Filed report or declaration, Submission receipt or publication URL with date, Approved policy or plan, Board minutes with approval, Named owner.", "ids": [ "documentation_requirement:eu:nis2" ], "question": "Which documents are required?", "sha256": "f32f0177a20e02f8739b30e561ef8cd67cbdec23b60c1a3b3877c4758c41a5dc" }, { "key": "if_not_met", "status": "ready", "answer": "2 sanctions, up to 2 % of turnover; e.g. EUR 10 000 000.", "ids": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ], "question": "What happens if the requirement is not met?", "sha256": "660c4a3c82272c0fb04e9e2d1acd9a396809ee0a62420f891c79eb686266a782" } ], "action_list": [ { "obligation": "obligation:eu:nis2-art-21-essential-entity", "provision": "nis2 art. 21", "role": "essential-entity", "action": "Take appropriate cybersecurity risk-management measures.", "deadline": null, "recipient": null, "verification": "design", "verification_method": "Internal review maps each requirement to an implemented measure.", "evidence": [ "Requirement-to-measure mapping", "Internal review note" ], "exceptions": [ "exception:eu:nis2-size-cap" ], "sanctions": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ], "related_rules": [ "obligation:eu:gdpr-art-24-controller", "obligation:eu:gdpr-art-25-controller" ], "source_url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj" }, { "obligation": "obligation:eu:nis2-art-23-essential-entity", "provision": "nis2 art. 23", "role": "essential-entity", "action": "Report significant incidents within the set deadlines.", "deadline": "24 hours", "recipient": "CSIRT or competent cyber authority", "verification": "authority_filing", "verification_method": "Filing or publication can be shown with date and recipient.", "evidence": [ "Filed report or declaration", "Submission receipt or publication URL with date" ], "exceptions": [ "exception:eu:nis2-size-cap" ], "sanctions": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ], "related_rules": [ "obligation:eu:ai-act-art-73-provider", "obligation:eu:gdpr-art-33-controller", "obligation:eu:gdpr-art-33-processor", "obligation:eu:dora-art-19-financial-entity", "obligation:eu:amlr-art-69-obliged-entity" ], "source_url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj" }, { "obligation": "obligation:eu:nis2-art-20-management-body", "provision": "nis2 art. 20", "role": "management-body", "action": "Approve the risk-management measures and follow training.", "deadline": null, "recipient": null, "verification": "governance", "verification_method": "Board-approved document with named owner and review date.", "evidence": [ "Approved policy or plan", "Board minutes with approval", "Named owner" ], "exceptions": [ "exception:eu:nis2-size-cap" ], "sanctions": [], "related_rules": [ "obligation:eu:dora-art-5-financial-entity", "obligation:eu:dora-art-6-financial-entity", "obligation:eu:dora-art-11-financial-entity", "obligation:eu:amlr-art-9-obliged-entity", "obligation:eu:amlr-art-11-obliged-entity" ], "source_url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj" } ], "checklist": [ { "step": 1, "role": "essential-entity", "do": "Take appropriate cybersecurity risk-management measures.", "verify": "Internal review maps each requirement to an implemented measure.", "keep": [ "Requirement-to-measure mapping", "Internal review note" ], "deadline": null, "if_not": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ], "done": false }, { "step": 2, "role": "essential-entity", "do": "Report significant incidents within the set deadlines.", "verify": "Filing or publication can be shown with date and recipient.", "keep": [ "Filed report or declaration", "Submission receipt or publication URL with date" ], "deadline": "24 hours", "if_not": [ "sanction:eu:nis2-art-34-4", "sanction:eu:nis2-art-34-5" ], "done": false }, { "step": 3, "role": "management-body", "do": "Approve the risk-management measures and follow training.", "verify": "Board-approved document with named owner and review date.", "keep": [ "Approved policy or plan", "Board minutes with approval", "Named owner" ], "deadline": null, "if_not": [], "done": false } ], "links": { "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:nis2", "act_kit": null, "articles": [ "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2--art-21", "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2--art-23", "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2--art-20" ], "risk": [ "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:nis2--essential-entity", "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:nis2--management-body" ], "timeline": [ "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:nis2-art-21-essential-entity", "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:nis2-art-23-essential-entity", "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:nis2-art-20-management-body" ], "list": "https://legal.exploreworldai.com/api/public/v1/action-kits" }, "method": "Rule to action: five fixed agent questions from deterministic registers. Verification and evidence come from fixed keyword rules on the duty text. No model writes anything.", "attribution": "Source: NovaCopilot", "hash": "d0f1d6d29f13b2ab3b958ea798b720c30cd1ce6e9db8a00468398f9407e95823" }, "links": { "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:nis2", "case_law": { "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:nis2", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:nis2" }, "evidence": { "provenance": null, "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2?view=compact", "representations": {}, "machine_languages": [ "en", "sv" ], "ref": "eu:nis2" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:e5940e7f12a345eaba1f3ce97df55549e6bdde785abd8de287c7194cf21c8209", "version": "legal-2026-10-07", "expires": "2026-10-08T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-07+legal-2026-10-07+2026-10-07T10:35:10", "content_hash": "sha256:e5940e7f12a345eaba1f3ce97df55549e6bdde785abd8de287c7194cf21c8209", "revalidate_after": "2026-10-07T11:55:46.912Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }