Published: 6 August 2026.
Yes. NIS2 is the successor to the first NIS Directive, not an entirely new law built from scratch.
NIS (2016)
The first European cybersecurity law — it set the basic framework, but with a limited number of covered sectors and organisations.
NIS2 (2022)
It extends the original law in several key directions:
- Number of sectors
- Number of organisations covered by the obligation
- Management responsibility
- Risk management requirements
- Incident reporting
- Supply chain security
The Simplest Explanation
NIS2 is a much more serious and extended version of the first NIS Directive.
If you are wondering whether this extended version now applies to your company too, try the free NIS2 check.