NIS2 · National implementation
NIS2 in Cyprus
Cyprus transposed NIS2 through the Security of Networks and Information Systems (Amendment) Law 60(I)/2025, in force since 25 April 2025, amending its NIS framework law.
- National law
- Law 60(I)/2025
- Security of Networks and Information Systems (Amendment) Law
- Status
- In force
- In force
- 25 April 2025
- Authority
- Digital Security Authority (DSA)
Supervision
The Digital Security Authority (DSA) is the competent authority and runs the national CSIRT (CSIRT-CY). Entities register with the DSA under the announced windows.
What is specific to Cyprus
The DSA carries both regulation and CSIRT under one roof, giving Cypriot entities a single counterpart. Shipping, telecoms and financial-adjacent services dominate the in-scope population, and the DSA has been issuing sector directives with the operative detail.
Official sources
Primary references: the national statute book at www.cylaw.org and the national cybersecurity authority at dsa.cy.
NIS2 in Cyprus: frequently asked questions
Last reviewed:
Related reading
Definitions