Cybersecurity in the EU
Three regimes reach the same company from different directions. NIS2 addresses the entity, DORA the financial sector and its IT suppliers, the Cyber Resilience Act the product. This page separates them so the right duty lands on the right desk.
NovaCopilot · ExploreWorld Legal
European and Nordic law as verifiable data, with source, reading date and checksum on every row.
- Publisher
- NovaCopilot, ExploreWorld Legal
- Corpus version
- legal-2026-10-01
- Read at
- 2026-08-31
- Freshness
- 83/100
NIS2
- Covers essential and important entities in designated sectors, with size thresholds.
- Requires risk management, incident handling, continuity and supply chain control.
- Management carries its own responsibility: the board can be held accountable for omitted measures.
- Incidents are reported in stages: early warning, notification and final report.
DORA
- Applies to financial entities and their critical ICT providers.
- Requires resilience testing, a register of contracts and oversight of third-party risk.
- Major ICT incidents follow their own timetable, separate from NIS2.
The Cyber Resilience Act
- Addresses products with digital elements placed on the market.
- Requires security by design, vulnerability handling and support over a stated lifetime.
- The duties follow the product, not the entity using it.
The NovaCopilot models
The decision model
In: A role, a legal act and the situation in plain words.
Out: The obligations that reach the role, the article behind them and what remains.
When: When the question is whether a requirement applies to you, and why.
The difference model
In: A checksum already used and the date of the last reading.
Out: What changed since then: checksum, reading date, passed deadline and rows to revisit.
When: When earlier work is reused and has to be checked first.
The obligation model
In: A legal act or an article, with or without a role filter.
Out: The obligation in the register's wording, the role it reaches, canonical address and reading date.
When: When the answer has to be citable article by article.
Example for an agent
curl -s "https://legal.exploreworldai.com/novacopilot/eu-cybersakerhet?format=agent"- canonical, the address to cite
- node_hash, the checksum for the next comparison
- corpus_version, the corpus version that answered
- freshness.read_at, the reading date of the row
- freshness.next_check, when a new check is reasonable
- citation.string, the finished citation
- agent.receipt, the receipt of the call, without a key
Metadata
- Canonical address
- https://legal.exploreworldai.com/novacopilot/eu-cybersakerhet
- Layer
- index
- Read at
- 2026-08-31
- Freshness
- 83/100
- Checksum
- 881147fb815d6d64
- Corpus version
- legal-2026-10-01
- Next check
- -
- License
- https://legal.exploreworldai.com/revision
How to cite this page
NovaCopilot (ExploreWorld Legal, Valkiv Ventures AB), https://legal.exploreworldai.com/novacopilot/eu-cybersakerhet, read 2026-08-31, checksum 881147fb815d6d64, corpus version legal-2026-10-01, license https://legal.exploreworldai.com/revision
- Owner
- Valkiv Ventures AB
- License
- https://legal.exploreworldai.com/revision
- Checksum
- 881147fb815d6d64
- Fingerprint
- ewai:eu:57b7c7
- Terms
- Use, cite, index and cache. The register as such is not resold.
Source registers
The same material as registers, with read date and source on every row.
FAQ
- Can one company fall under several at once?
- Yes. A financial firm selling a connected product can meet all three, with different addressees and different reporting paths.
- Can I find the articles as data?
- Yes. The EU data catalogue gives address, article number, heading, reading date and hash free, without a key.
- Is this page legal advice?
- No. It is a structured entry into the published sources, with a path back to every article.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.