Glossary
NIS2
The European cybersecurity directive, for which DORA is the specialised track for the financial sector.
NIS2 (Directive (EU) 2022/2555) is the European directive that sets a common cybersecurity baseline for 18 critical sectors (energy, health, transport, digital...). Unlike DORA, NIS2 is a directive: each Member State transposes it into its national law.
For the financial sector, DORA is lex specialis: it takes precedence over NIS2. A financial entity covered by DORA applies DORA for its cybersecurity, not the NIS2 rules transposed into national law.