The contribution of the European NIS2 directive to the design of the cyber security model

Abstract

The article discusses the possible effects of Directive 2022/2555 of the European Parliament (EU) and of the Council of 14 December 2022 on measures to ensure an ordinary high level of cyber security in the Union and amending Regulation (EU) No. 910/2014 and Directive (EU) 2018 /1972 and on the repeal of Directive (EU) 2016/1148 (NIS2 Directive) and subsequently to it on the Act on Cybersecurity and on the amendment of related laws (Act on cyber security), which will have to be amended concerning the NIS2 directive and their possible impacts on information security management systems (ISMS policies). The contribution aims to describe the current state of implementation of the NIS2 directive into the legal environment using the example of the Czech Republic. To outline the possible procedure of applying the implemented directive into practice and possible impacts on subjects.