The innovations in the NIS Directive are relevant for CRITIS companies.
It obliges companies operating in so-called "essential sectors" to take appropriate measures against cyber threats to protect their networks and information systems. The updated NIS-2 Directive came into force in January 2023 and extends the scope of application to a total of 22 digital service provider groups.

The EU CER Directive regulates the resilience of critical infrastructure in the EU through corporate actions and government oversight. RCE requires resilience of critical services at enterprises, while EU NIS 2 regulates cyber security.