NIS2

NIS2 Basics

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

The Network and Information Security Directive 2: scope, governance duties, and incident reporting for essential and important entities.

10 questions · 70% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 10

What does NIS2 stand for?

Network and Information Security Directive (the second version)National Information Sharing StandardNew Internet Safety StatuteNetwork Integrity and Surveillance Directive

Question 2 of 10

NIS2 generally distinguishes between which two categories of in-scope entities?

Public and private only, with no risk-based distinctionEssential entities and important entities, based on sector and sizeDomestic and foreign entitiesProfitable and non-profitable entities

Question 3 of 10

Under Article 20, who is responsible for approving cybersecurity risk-management measures within an in-scope entity?

Only the IT helpdeskManagement bodies, who can also be held accountable for infringementsA random employeeExternal auditors, with no internal accountability

Question 4 of 10

Under Article 21, what must in-scope entities implement to manage cybersecurity risk?

Only a written mission statementNo formal measures are requiredAppropriate and proportionate technical, operational and organisational measuresA single annual newsletter to staff

Question 5 of 10

Under Article 23, what must entities generally do upon becoming aware of a significant incident?

Wait until the annual report to mention itSubmit an early warning to the relevant CSIRT or competent authority without undue delayNothing is required unless a regulator specifically asksOnly inform their own employees

Question 6 of 10

What is a CSIRT, as referenced throughout NIS2?

A type of firewallA financial audit reportA category of prohibited AI practiceA Computer Security Incident Response Team

Question 7 of 10

Article 24 references the use of what kind of schemes to demonstrate compliance with certain requirements?

Employment visa schemesTrademark registration schemesTax exemption schemesEuropean cybersecurity certification schemes

Question 8 of 10

Under Article 32, what enforcement tools are available to supervisory authorities for essential entities?

None — essential entities cannot be supervisedOnly informal phone callsAutomatic criminal prosecution with no administrative routeOn-site inspections, off-site supervision, and the ability to issue binding instructions among other measures

Question 9 of 10

Which of the following sectors is a typical example of one covered by NIS2's scope?

Amateur hobbyist bloggingEnergyPersonal social media useHome gardening

Question 10 of 10

What is a key theme of NIS2 compared to the original NIS Directive?

Exclusive focus on non-EU companiesThe complete removal of any incident reporting dutyA narrower scope covering fewer sectorsAn expanded scope, stricter security and reporting requirements, and greater enforcement powers

0 of 10 answered