NIS2 Directive (Network and Information Security Directive 2)
In telecommunications, NIS2 is the EU directive that strengthens cybersecurity obligations for essential and important entities, including electronic communications providers. It mandates risk management measures, supply-chain security, incident reporting within strict timelines, and executive accountability.
Categories: Regulation and Compliance
NIS2 Directive in context
Telecom regulation is fragmenting: NIS2 and the CER Directive in the EU, the Telecoms Security Act in the UK, sector rules in the US, GCC and APAC, plus horizontal frameworks like GDPR and DORA. Operators need control-level mappings between technical baselines (GSMA FS.11/FS.19) and each jurisdictional obligation.
To place NIS2 Directive in the wider telecom-security picture, review CER Directive, ENISA, Metadata Retention, NRA, BEREC and Data Retention.
Related terms
Related topic hubs
- Open RAN Security O-RAN xApp/rApp, E2/A1/O1 interfaces and RIC security.
- Telecom Security Audit Structured MNO/MVNO security audit methodology.
More from the TelcoSec Glossary
Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.