The NIS2 Directive is an updated European Union regulation aimed at improving the cybersecurity of critical infrastructures, replacing the original NIS Directive. It significantly broadens the scope to include more sectors, introduces stricter cybersecurity requirements, and imposes heavier penalties for non-compliance. NIS2 applies to both "essential" and "important" entities across industries such as healthcare, digital infrastructure, energy, and public administration. Key elements of the directive include improved risk management, expanded incident reporting requirements, and a focus on supply chain security.