Agent skill · security · borghei
nis2-directive-specialist
NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures. Use for NIS2 compliance assessments, entity scope analysis, supply chain security, and incident reporting readiness.
Why this skill is useful
Provides specific compliance assessment workflows and incident reporting guidelines for NIS2 Directive that are not widely known.
What it needs
About 10k tokens when loaded. Last updated 2026-07-21. 462 stars on the source repository.
What this skill does
NIS2 Directive Specialist Tools and guidance for EU Directive 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive). --- Table of Contents NIS2 Overview Scope and Applicability 10 Minimum Security Measures Incident Reporting Requirements Management Accountability Supply Chain Security Penalties NIS2 vs NIS1 Comparison Infrastructure Security Checks Tools Reference Guides Compliance Assessment Workflow NIS2 Implementation Roadmap --- NIS2 Overview The NIS2 Directive (EU 2022/2555) is the EU's updated framework for cybersecurity, replacing the original NIS Directive (EU 2016/1148). It entered into force on January 16, 2023, with Member States required to transpose it into national law by October 17, 2024. Key objectives: Establish a high common level of cybersecurity across the EU Harmonize cybersecurity requirements and enforcement Expand scope to cover more sectors and entities Strengthen incident reporting obligations Introduce management accountability for cybersecurity Enhance supply chain security requirements Legal basis: Article 114 TFEU (internal market harmonization) Relationship to other frameworks: Framework Relationship ----------- ------------- ISO 27001 NIS2 measures map closely to ISO 27001 controls GDPR NIS2 complements GDPR for security of processing CER Directive Critical Entities Resilience — physical security complement DORA Lex specialis for financial sector entities Cyber Resilience Act Product security requirements for hardware/software --- Scope and Applicability Essential Entities (Annex I — High Criticality Sectors) Sector Sub-sectors -------- ------------ Energy Electricity (DSOs, TSOs, producers, storage), oil (pipelines, production, refineries, storage), gas (DSOs, TSOs, LNG, storage), hydrogen, district heating/cooling Transport Air (carriers, airports, traffic management), rail (infrastructure managers, operators), water (inland, maritime, port operators), road (traffic management, ITS operator …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills borghei/nis2-directive-specialist