{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/nis2", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/nis2)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-09-29", "fingerprint": "ewai:eu:369dad", "proof": "sha256:9b8c330039d082d1e04eb6c536409f660e65c1be2f512f6b48afb0e3e2ae5314", "jurisdiction": "eu", "lang": "en" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "id": "topic:eu:nis2", "object_type": "topic", "schema_version": "1", "jurisdiction": "eu", "title": "NIS2, cybersäkerhet", "title_en": "NIS2, cybersecurity", "short_answer": "Väsentliga och viktiga verksamheter måste vidta säkerhetsåtgärder, rapportera betydande incidenter inom 24 timmar och ledningen bär personligt ansvar.", "short_answer_en": "Essential and important entities must take security measures, report significant incidents within 24 hours, and management is personally accountable.", "applies": "Genomförs i nationell lag i varje medlemsstat.", "law": { "title": "Direktiv (EU) 2022/2555", "celex": "32022L2555", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555", "act_url": "https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555" }, "chain": { "elements": [ { "id": "topic:eu:nis2#element-1", "label": "Väsentlig eller viktig verksamhet i en sektor enligt bilaga I eller II" }, { "id": "topic:eu:nis2#element-2", "label": "Medelstort eller större företag" }, { "id": "topic:eu:nis2#element-3", "label": "Betydande incident" } ], "obligations": [ { "id": "topic:eu:nis2#obligation-1", "duty": "Ledningen godkänner och övervakar åtgärderna och går utbildning", "article": "art. 20", "source": "art. 20 Direktiv (EU) 2022/2555" }, { "id": "topic:eu:nis2#obligation-2", "duty": "Vidta riskhanteringsåtgärder, bland annat incidenthantering, kontinuitet, leverantörskedja och kryptering", "article": "art. 21", "source": "art. 21 Direktiv (EU) 2022/2555" }, { "id": "topic:eu:nis2#obligation-3", "duty": "Tidig varning inom 24 timmar, incidentanmälan inom 72 timmar, slutrapport inom en månad", "article": "art. 23", "source": "art. 23 Direktiv (EU) 2022/2555" } ], "sanction": { "id": "topic:eu:nis2#sanction-1", "text": "Väsentliga verksamheter: minst upp till 10 miljoner euro eller 2 % av global omsättning. Viktiga: minst upp till 7 miljoner euro eller 1,4 %.", "article": "art. 34" }, "compliance": [ "Klassificera verksamheten", "Registrera hos myndigheten", "Riskanalys och åtgärder", "Incidentrutin 24/72 timmar", "Utbilda ledningen" ] }, "next_questions": [ { "id": "topic:eu:nis2#q:omfattas-vi-av-nis2", "question": "Omfattas vi av NIS2?", "answer": "Ja, om ni verkar i en sektor i bilaga I eller II och har minst 50 anställda eller 10 miljoner euro i omsättning. Vissa omfattas oavsett storlek.", "question_en": "Are we covered by NIS2?", "answer_en": "Yes, if you operate in an Annex I or II sector and have at least 50 staff or EUR 10 million turnover. Some are covered regardless of size.", "url": "https://legal.exploreworldai.com/eu/amne/nis2/omfattas-vi-av-nis2", "leads_to": null }, { "id": "topic:eu:nis2#q:vad-ar-ledningens-ansvar", "question": "Vad är ledningens ansvar enligt NIS2?", "answer": "Ledningen ska godkänna säkerhetsåtgärderna, övervaka genomförandet och gå utbildning. Den kan hållas ansvarig vid överträdelser.", "question_en": "What is management's responsibility under NIS2?", "answer_en": "Management must approve security measures, oversee implementation and take training. It can be held liable for infringements.", "url": "https://legal.exploreworldai.com/eu/amne/nis2/vad-ar-ledningens-ansvar", "leads_to": null }, { "id": "topic:eu:nis2#q:nis2-eller-dora", "question": "Gäller NIS2 eller DORA för finansiella företag?", "answer": "DORA gäller före NIS2 för finansiella företag, eftersom DORA är särskild lagstiftning för sektorn.", "question_en": "Does NIS2 or DORA apply to financial entities?", "answer_en": "DORA takes precedence over NIS2 for financial entities as sector-specific law.", "url": "https://legal.exploreworldai.com/eu/amne/nis2/nis2-eller-dora", "leads_to": "topic:eu:dora" } ], "edges": [ { "type": "related", "to": "topic:eu:dora", "url": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/dora" }, { "type": "related", "to": "topic:eu:ai-act", "url": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/ai-act" }, { "type": "related", "to": "topic:eu:eidas", "url": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/eidas" }, { "type": "next_question", "to": "topic:eu:dora", "via": "Does NIS2 or DORA apply to financial entities?", "url": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/dora" } ], "sha256": "45158e470562d3fe0cf079bf6ef0f8aad7401303112280732f868734bc944cb8", "page": "https://legal.exploreworldai.com/eu/amne/nis2", "permanent_url": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/nis2", "ask": "https://legal.exploreworldai.com/api/public/v1/agent/ask?q=Are%20we%20covered%20by%20NIS2%3F", "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "recheck_after_seconds": 86400, "how": "Send If-None-Match with the ETag; unchanged returns 304." }, "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "source": "NovaCopilot", "hash": "sha256:9b8c330039d082d1e04eb6c536409f660e65c1be2f512f6b48afb0e3e2ae5314", "version": "legal-2026-09-29", "expires": "2026-10-01T00:00:00.000Z", "dependency": { "index_version": "legal-2026-09-29+legal-2026-09-29+2026-09-29T21:40:00", "content_hash": "sha256:9b8c330039d082d1e04eb6c536409f660e65c1be2f512f6b48afb0e3e2ae5314", "revalidate_after": "2026-09-30T03:44:27.497Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/topic-graph/eu/nis2", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }