Artikkel 32 — Supervisory and enforcement measures in relation to essential entities

NIS2, direktiv (EU) 2022/2555

Hva sier NIS2 Artikkel 32?

Kort svar, rett fra den offisielle teksten

1. Member States shall ensure that the supervisory or enforcement measures imposed on essential entities in respect of the obligations laid down in this Directive are effective, proportionate and dissuasive, taking into account the circumstances of each individual case. 2.

Kilde: NIS2, direktiv (EU) 2022/2555, lest 2026-08-14.

Offisiell tekst

Lest hos EUs publikasjonskontor for dette CELEX-nummeret. Ordlyden står slik den er publisert, ingenting er skrevet om eller sammenfattet.

Teksten vises på engelsk. Norsk er ikke et offisielt EU-språk, så den offisielle ordlyden finnes ikke på norsk.

Hopp til et punkt: Punkt 1 · Punkt 2 · Punkt 3 · Punkt 4 · Punkt 5 · Punkt 6 · Punkt 7 · Punkt 8 · Punkt 9

1. Member States shall ensure that the supervisory or enforcement measures imposed on essential entities in respect of the obligations laid down in this Directive are effective, proportionate and dissuasive, taking into account the circumstances of each individual case.

2. Member States shall ensure that the competent authorities, when exercising their supervisory tasks in relation to essential entities, have the power to subject those entities at least to:

(a) on-site inspections and off-site supervision, including random checks conducted by trained professionals;

(b) regular and targeted security audits carried out by an independent body or a competent authority;

(c) ad hoc audits, including where justified on the ground of a significant incident or an infringement of this Directive by the essential entity;

(d) security scans based on objective, non-discriminatory, fair and transparent risk assessment criteria, where necessary with the cooperation of the entity concerned;

(e) requests for information necessary to assess the cybersecurity risk-management measures adopted by the entity concerned, including documented cybersecurity policies, as well as compliance with the obligation to submit information to the competent authorities pursuant to Article 27;

(f) requests to access data, documents and information necessary to carry out their supervisory tasks;

(g) requests for evidence of implementation of cybersecurity policies, such as the results of security audits carried out by a qualified auditor and the respective underlying evidence.

Artikkelen fortsetter i den offisielle teksten.

Åpne artikkelen på EUR-Lex

• Forrige artikkel
• Neste artikkel

Andre artikler i kapitlet

• Article 31
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37

Hvem gjelder dette for

Registeret navngir fem roller. Åpne en rolle for å se pliktene rettsakten legger på den, hver rad med artikkel og kilde.

• Skytjenesteleverandør

Gjelder dette oss?

• Do ai governance rules apply to a cloud provider?
• Do personal data rules apply to a cloud provider?
• Do cross-border data rules apply to a cloud provider?
• Do cybersecurity rules apply to a cloud provider?
• Do health data rules apply to a cloud provider?
• Do online platforms rules apply to a cloud provider?

Alle roller i registeret · Alle spørsmål per rolle

Teksten er sitert fra den offisielle kilden og er ikke juridisk rådgivning. En nasjonal domstol leser språkversjonen som binder i sin jurisdiksjon.

Tilbake til rettsakten · EU-rettsakter, lest helt ned til nasjonal lov

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.