Network and Information Systems (NIS) Regulations - A pocket guide for digital service providers

CHAPTER 3: COMPLYING WITH THE DIRECTIVE

As described earlier, the NIS Directive is not a piece of legislation that applies directly to organisations – although the NIS Regulations do – so speaking of the ‘Directive’s requirements’ is slightly misleading. It is not that the Directive tells organisations how to operate within the market; rather, it tells Member States to legislate within a set of parameters. Having said that, understanding what the Directive actually demands of Member States – and what the relevant competent authorities have said on the matter – can be illuminating.

For OES in the UK, compliance with the NIS Regulations – and, by extension, the Directive – is achieved by meeting requirements set by the NCSC and relevant competent ...