lexiara

2.

Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union · European Union

Member States shall ensure that the competent authorities have the powers and means to require operators of essential services to provide: the information necessary to assess the security of their network and information systems, including documented security policies; evidence of the effective implementation of security policies, such as the results of a security audit carried out by the competent authority or a qualified auditor and, in the latter case, to make the results thereof, including the underlying evidence, available to the competent authority. When requesting such information or evidence, the competent authority shall state the purpose of the request and specify what information is required.

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-10-28 · Text as adopted (Official Journal); later amendments are not incorporated in this text.