EU regulatory register · NIS2
Article 6Definitions
CELEX 32022L2555 · Read on 2026-08-18 · Chapter I
Short answer
For the purposes of this Directive, the following definitions apply:
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-6 · Short answer as data · Official text
NIS2, cybersecurity in short
Essential and important entities must take security measures, report significant incidents within 24 hours, and management is personally accountable.
- Are we covered by NIS2?
- What is management's responsibility under NIS2?
- Does NIS2 or DORA apply to financial entities?
Source: NovaCopilot
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
For the purposes of this Directive, the following definitions apply:
(1)
‘network and information system’ means:
(a)
an electronic communications network as defined in Article 2, point (1), of Directive (EU) 2018/1972;
(b)
any device or group of interconnected or related devices, one or more of which, pursuant to a programme, carry out automatic processing of digital data; or
(c)
digital data stored, processed, retrieved or transmitted by elements covered under points (a) and (b) for the purposes of their operation, use, protection and maintenance;
(2)
‘security of network and information systems’ means the ability of network and information systems to resist, at a given level of confidence, any event that may compromise the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, those network and information systems;
(3)
‘cybersecurity’ means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;
(4)
The article continues in the official text.
Follow-up questions
Other articles in this chapter
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit