Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
Skip to the answer
NovaCopilotA service from ExploreWorldAI

Source status and reading dates are reported separately. A reading date is not source verification.

Back to the act

EU regulatory register · NIS2

Article 19Peer reviews

CELEX 32022L2555 · Read on 2026-08-18 · Chapter III

Share this page

Short answer

1. The Cooperation Group shall, on 17 January 2025, establish, with the assistance of the Commission and ENISA, and, where relevant, the CSIRTs network, the methodology and organisational aspects of peer reviews with a view to learning from shared experiences, strengthening mutual trust, achieving a high common level of cybersecurity, as well as …

Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-19 · Short answer as data · Official text

NIS2, cybersecurity in short

Essential and important entities must take security measures, report significant incidents within 24 hours, and management is personally accountable.

Source: NovaCopilot

Official text

Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.

1. The Cooperation Group shall, on 17 January 2025, establish, with the assistance of the Commission and ENISA, and, where relevant, the CSIRTs network, the methodology and organisational aspects of peer reviews with a view to learning from shared experiences, strengthening mutual trust, achieving a high common level of cybersecurity, as well as enhancing Member States’ cybersecurity capabilities and policies necessary to implement this Directive. Participation in peer reviews is voluntary. The peer reviews shall be carried out by cybersecurity experts. The cybersecurity experts shall be designated by at least two Member States, different from the Member State being reviewed.

The peer reviews shall cover at least one of the following:

(a)

the level of implementation of the cybersecurity risk-management measures and reporting obligations laid down in Articles 21 and 23;

(b)

the level of capabilities, including the available financial, technical and human resources, and the effectiveness of the exercise of the tasks of the competent authorities;

(c)

the operational capabilities of the CSIRTs;

(d)

the level of implementation of mutual assistance referred to in Article 37;

(e)

the level of implementation of the cybersecurity information-sharing arrangements referred to in Article 29;

(f)

specific issues of cross-border or cross-sector nature.

The article continues in the official text.

Open the article on EUR-Lex

Follow-up questions

Other articles in this chapter

The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit