Sectors / Energy
Energy
sector entry point
regulator designated under NIS2/CER
NIS2 · CER · Netcode cybersecurity
an example from the energy sector
An OT outage is handled and reported by the book. Three months later the regulator asks: "what did that outage change in your organisation?" The answer sits scattered across inboxes, an evaluation document and management minutes. You did learn — you just cannot show it.
The same directives, your regulator
NIS2 and CER apply to essential and critical entities in the energy sector. For grid operators, the Netcode cybersecurity adds further requirements.
The directives ask for proof — this is ready
Per anchor: what the directive asks, and what is ready for it.
Go to the law →Knowing and showing
One yardstick for exercise and real response, recurring threads that get followed through, and readiness from exercise and response data alike.
Go to the approach →