Entity: Critical Infrastructure Protection Directorate

Background: The Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148, also known as the NIS2 Directive, entered into force on 16 January 2023 and must be transposed into national law by 17 October 2024. The obligations and measures outlined in the Directive will begin to apply from 18 October 2024.

The NIS2 Directive establishes a common regulatory framework for cybersecurity across the European Union. It requires Member States to strengthen cybersecurity capabilities and introduce risk-management measures and reporting in critical sectors. The NIS2 Directive also sets rules on cooperation, information sharing, supervision, and enforcement.

For the effective implementation of the NIS2 Directive in Malta, a national law referencing the above matters requires to be enacted. The purpose of this consultation is to seek input on the proposed draft order.

Consultation document can be accessed from here: Measures-for-A-High-Common-Level-of-Cybersecurity-Across-The-European-Union-Malta-Order-2024.pdf (gov.mt)