On 28 November 2022, the Council of European Union adopted the Network and Information Security Directive (NIS2), which imposes cybersecurity obligations across sectors, including energy, transport, banking and finance, health, and providers of publ…