NIS2: Commission review of the directive

Review report due on 17 Oct 2027, in 12 months.

17 Oct 2027 in 12 months Upcoming

NIS2: Commission review of the directive

Review report due · Directive (EU) 2022/2555, Article 40 · European Commission

MaritimeIndustryInfrastructure EU Law

The Commission has to review how NIS2 is working and report by 17 October 2027. In January 2026 it already proposed targeted amendments as part of a new cybersecurity package. Expect the scope and the reporting rules to be tuned, not loosened.

EUR-Lex · European Commission

What to do 0 of 4 done

Keep a note of the NIS2 amendments proposed in January 2026 and their status
Review which national rules changed since your last compliance check
Re-check whether the company is essential or important after any size change
Plan a yearly refresh of the security measures rather than a one-off project

Ticks are kept in this browser only. Sign in to the client portal to share them with your team.

Need this tracked for your fleet or plant?

In the client portal the same checklist is shared with your team, the ticks are kept, and the entry sits next to the registers that prove what you did.

Get in touch Back to the clock