Translations:Network and Information Security Directive (NIS2-RL)/77/en

§ 32(2) NISG obliges affected entities to ensure a level of security appropriate to the existing risk, thus reinforcing the risk-based approach.