# Network and Information Systems Directive 2

https://www.botable.ai/glossary/network-and-information-systems-directive-2

> Company-published glossary/explanatory content — useful as a high-level overview of NIS 2 and related compliance topics but not a legal text. Attribute claims to this Botable page when citing and verify legal or regulatory details against official EU sources for authoritative use.

## Summary

This glossary article defines NIS 2 as the European Union's cybersecurity directive that expands legal obligations for essential and important organizations and outlines required documentation and mandatory training (Article 20) to improve digital resilience.

## Audience

Security, compliance, and operations teams at organizations deemed essential or important (critical infrastructure)

## Prompts this page answers

- What is NIS 2 and why does it matter for critical infrastructure organizations?
- What documentation and training does the NIS 2 directive require?
- How does NIS 2 relate to ISO 27001, ISO 22301, and DORA?
- What does Article 20 of NIS 2 require for employee cybersecurity training?

## Purpose

Explain what the NIS 2 directive is and summarise its scope, compliance components (documentation and training), and its relationship to other management systems (ISO 27001, ISO 22301, DORA).

## Highlights

- NIS 2 is the European Union's cybersecurity directive intended to increase resilience and responsiveness of organizations operating critical infrastructure.
- The directive expands scope and strengthens legal obligations, replacing the original NIS Directive.
- Compliance requires documented procedures and mandatory training programs (Article 20) for employees and senior management.
- NIS 2 documentation is often implemented alongside ISO 27001, ISO 22301, and DORA.

## How to cite



## Publisher

**Botable** — Publisher of botable.ai.

## Topics

- NIS 2
- EU cybersecurity directive
- NIS2 compliance documentation
- NIS2 training Article 20
- ISO 27001 and NIS 2
- DORA and NIS 2

## Key entities

- **NIS 2** (other): Network and Information Systems Directive 2 — the EU cybersecurity directive described on the page. — https://www.botable.ai/glossary/network-and-information-systems-directive-2
- **ISO 27001** (other): Information Security Management Systems standard mentioned as related to NIS 2.
- **ISO 22301** (other): Business Continuity Management Systems standard mentioned as related to NIS 2.
- **DORA** (other): Directive on operational resilience in the financial sector mentioned as related to NIS 2.
- **Botable** (other): Site/brand hosting the glossary entry. — https://www.botable.ai/

## Metadata

- Type: article