NIS 2 refers to European Union’s Directive 2022/2555 , which updates and expands the original NIS Directive. Its goal is to improve cybersecurity across critical sectors and essential services by introducing stricter requirements for risk management , governance , and incident reporting. In Portugal , the transposition of NIS2 has been published — Decree-Law No. 125/2025 of December 4 — making it imperative for organizations to take action . This marks a decisive s