NIS2 Article EN

Article 22

Union level coordinated security risk assessments of critical supply chains

Automated Decision-Making Profiling Artificial Intelligence AI and Machine Learning AI Value Chain Actors and Roles Security
  1. 1.

    The Cooperation Group, in cooperation with the Commission and ENISA, may carry out coordinated security risk assessments of specific critical ICT services, ICT systems or ICT products supply chains, taking into account technical and, where relevant, non-technical risk factors.

  2. 2.

    The Commission, after consulting the Cooperation Group and ENISA, and, where necessary, relevant stakeholders, shall identify the specific critical ICT services, ICT systems or ICT products that may be subject to the coordinated security risk assessment referred to in paragraph 1.

Related across sources

Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidance Guidelines 9/2022 on personal data breach notification under GDPR Guidance Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidance Guidelines 05/2020 on consent under Regulation 2016/679 Guidance Guidelines 01/2022 on data subject rights - Right of access Guidance Version history