Article 7: National cybersecurity strategy

agent:eu:nis2:art-7 · sha256 fdf50514fe199f0b

Turnover framework under the act

Art. 34(4): at least the higher of EUR 10,000,000 / 2 % of worldwide annual turnover
Art. 34(5): at least the higher of EUR 7,000,000 / 1.4 % of worldwide annual turnover
The framework follows from article 34.

Affected roles

Not in the register yet.

Affected industries

Not in the register yet.

Obligations

Not in the register yet.

Article text

1. Each Member State shall adopt a national cybersecurity strategy that provides for the strategic objectives, the resources required to achieve those objectives, and appropriate policy and regulatory measures, with a view to achieving and maintaining a high level of cybersecurity. The national cybersecurity strategy shall include:

(a)

objectives and priorities of the Member State’s cybersecurity strategy covering in particular the sectors referred to in Annexes I and II;

(b)

a governance framework to achieve the objectives and priorities referred to in point (a) of this paragraph, including the policies referred to in paragraph 2;

(c)

a governance framework clarifying the roles and responsibilities of relevant stakeholders at national level, underpinning the cooperation and coordination at the national level between the competent authorities, the single points of contact, and the CSIRTs under this Directive, as well as coordination and cooperation between those bodies and competent authorities under sector-specific Union legal acts;

(d)

a mechanism to identify relevant assets and an assessment of the risks in that Member State;

(e)

an identification of the measures ensuring preparedness for, responsiveness to and recovery from incidents, including cooperation between the public and private sectors;

(f)

a list of the various authorities and stakeholders involved in the implementation of the national cybersecurity strategy;

(g)

Machine-readable form The article in the register ChangesSource: NovaCopilot