What is NIS2

NIS2 is Directive (EU) 2022/2555. It requires essential and important entities to manage cybersecurity risks and to report significant incidents.

The risk-management measures are Article 21. The reporting clocks are Article 23. The directive does not name SPF, DKIM, or DMARC.