NIS2, Article 32, NO
1. Member States shall ensure that the supervisory or enforcement measures imposed on essential entities in respect of the obligations laid down in this Directive are effective, proportionate and dissuasive, taking into account the circumstances of each individual case.
2. Member States shall ensure that the competent authorities, when exercising their supervisory tasks in relation to essential entities, have the power to subject those entities at least to:
(a)
on-site inspections and off-site supervision, including random checks conducted by trained professionals;
(b)
regular and targeted security audits carried out by an independent body or a competent authority;
(c)
ad hoc audits, including where justified on the ground of a significant incident or an infringement of this Directive by the essential entity;
(d)
security scans based on objective, non-discriminatory, fair and transparent risk assessment criteria, where necessary with the cooperation of the entity concerned;
(e)
requests for information necessary to assess the cybersecurity risk-management measures adopted by the entity concerned, including documented cybersecurity policies, as well as compliance with the obligation to submit information to the competent authorities pursuant to Article 27;
(f)
requests to access data, documents and information necessary to carry out their supervisory tasks;
Version: 9c34faa459eb5d5b
SHA-256: sha256:9c34faa459eb5d5bad40f57864dd8f591ce6cd06392157fd3a9cf7092ba6f231
- Article 1
- Article 2
- Article 3
- Article 4
- Article 5
- Article 6
- Article 7
- Article 8
- Article 9
- Article 10
- Article 11
- Article 12
- Article 13
- Article 14
- Article 15
- Article 16
- Article 17
- Article 18
- Article 19
- Article 20
- Article 21
- Article 22
- Article 23
- Article 24
- Article 25
- Article 26
- Article 27
- Article 28
- Article 29
- Article 30
- Article 31
- Article 33
- Article 34
- Article 35
- Article 36
- Article 37
- Article 38
- Article 39
- Article 40
- Article 41
- Article 42
- Article 43
- Article 44
- Article 45
- Article 46
Source: NovaCopilot