With a delay of almost six months from the initial deadline announced (31 March 2025), the implementing rules of the NIS2 Directive have been published, by means of Order no. 1/2025 approving the Requirements regarding the notification process for registration and the method of transmitting information, and Order no. 2/2025 approving the Criteria and thresholds for determining the degree of disruption of a service and the Methodology for assessing the risk level of entities, issued by the National Cyber Security Directorate (DNSC) and published in the Official Gazette no. 776 of 20 August 2025.
Read more :NIS2 DIRECTIVE : NOTIFICATION DEADLINE SET FOR COVERED ENTITIES | Gruia Dufaut Law Office