---
title: "Cybersecurity rules for organisations (NIS2)"
description: "Cybersecurity rules for organisations (NIS2), family Govern, NIS2 Art. 21"
url: https://www.alt-f1.be/en/table/n2/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Cybersecurity rules for organisations (NIS2)

Short label: NIS2

Family: Govern · NIS2 Art. 21
<a id="meaning"></a>

## Meaning

NIS2 sets cybersecurity requirements for organisations within its scope. Belgian implementation and sector-specific rules determine the applicable duties.

<a id="why"></a>

## Why it matters

Organisations directly covered and suppliers affected through contracts have different questions to answer.

<a id="actions"></a>

## What you can do

Check whether you are in scope, assign responsibilities and document risk measures. Assess significant-incident reporting obligations using the official requirements.

## Services that can help

Device Shield, Web App Shield and Workshops support specific controls and evidence. They do not by themselves establish full NIS2 compliance.

- [Device Shield](https://www.alt-f1.be/en/device-shield.md)
- [Web App Shield](https://www.alt-f1.be/en/web-shield.md)
- [Workshops](https://www.alt-f1.be/en/workshops.md)

## Official reference — NIS2 Art. 21

> 1. Member States shall ensure that essential and important entities take appropriate and proportionate technical, operational and organisational measures to manage the risks posed to the security of network and information systems which those entities use for their operations or for the provision of their services, and to prevent or minimise the impact of incidents on recipients of their services and on other services.
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(1)

**What this reference concerns:** The core duty: an organisation covered by NIS2 must take measures, proportionate to its risk, that protect its systems and limit the damage of an incident — and be able to show it.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU