Translations:Network and Information Security Directive (NIS2-RL)/93/en

• **Accountability**: Corporate leadership (e.g., board, management) is responsible for approving and overseeing the implementation of risk management obligations.
• **Personal liability**: Management bodies may be held personally accountable for non-compliance with these obligations.
• **Training obligation**: Management bodies must undergo cybersecurity training and ensure such training is also available to their employees.
• **Skill development**: Training aims to provide adequate knowledge and capabilities to identify and assess cybersecurity risks and implement appropriate management practices.
• **Preventive approach**: Strengthening leadership competencies is intended to proactively mitigate cybersecurity threats.