NIS2 Directive · Directive (EU) 2022/2555
Article 23b
Compare the available Commission, Council and Parliament texts and amendments affecting this article.
Article total: 1 part · 1 Council draft · 0 Parliament amendments
Removed wording is struck through; added or replacement wording is highlighted.
Institutional text
European Commission proposal
All Commission’s changes to NIS2 DirectiveThe wording proposed by the Commission at the start of this legislative file.
No standalone Commission wording is mapped to these tracked parts. A newly proposed provision may have no earlier text of its own.
Institutional text
Council Presidency texts
Successive Presidency compromise texts. Their inclusion does not imply agreement or adoption.
No Council wording is mapped to this tracked part.
Article in September Presidency compromise Council text
Comparison basis: Existing law (14 December 2022) compared with September Presidency compromise (3 September 2026)
Article 23b
National entry point for incident reporting
- 1.
Member States shall establish and maintain a national entry point for the reporting of incidents and related events under the Union legal acts where those Union legal acts provide so. The national entry point may, depending on Member States’ organisational arrangement, allow for relevant tasks and functionalities in order to support and facilitate the reporting of incidents.
- 2.
Member States shall retain flexibility to configure their national entry point in accordance with their existing national structures and the allocation of competences among authorities, including by connecting existing systems and enabling the sharing, routing or distribution of relevant information.
- 3.
Member States shall endeavour to design their national entry point with a view to making the national entry points interoperable with the national entry points of other Member States.
- 4.
ENISA shall, by [12 months from the date of entry into force of this amending Regulation], in consultation with the CSIRTs network, the Cooperation Group and other relevant bodies or groups established at Union level under relevant Union legal acts provide non-binding recommendations to support Member States in the establishment, maintenance and secure operation of their respective national entry point. Those recommendations shall address technical, operational and organisational measures, taking into account experiences and lessons learned from existing reporting structures. Those recommendations shall include technical specifications to ensure interoperability between all Member States’ national entry points as referred to in paragraph 3 and to facilitate the alignment of incident notifications submitted via their respective national entry point with cross-border reporting obligations.
- 5.
ENISA shall, by [18 months from the date of entry into force of this amending Regulation], in cooperation with Member States, develop an open-source solution that may be used by Member States in setting up their national entry point in accordance with paragraph 1, with the objective of strengthening interoperability between national systems and enable faster, more effective cross-border data sharing when a situation requires coordinated action
Article 23b
September Presidency compromise
Council wording reconstructed for this provision from the official operation
Article 23b National entry point for incident reporting (1) Member States shall establish and maintain a national entry point for the reporting of incidents and related events under the Union legal acts where those Union legal acts provide so. The national entry point may, depending on Member States’ organisational arrangement, allow for relevant tasks and functionalities in order to support and facilitate the reporting of incidents. (2) Member States shall retain flexibility to configure their national entry point in accordance with their existing national structures and the allocation of competences among authorities, including by connecting existing systems and enabling the sharing, routing or distribution of relevant information. (3) Member States shall endeavour to design their national entry point with a view to making the national entry points interoperable with the national entry points of other Member States. (4) ENISA shall, by [12 months from the date of entry into force of this amending Regulation], in consultation with the CSIRTs network, the Cooperation Group and other relevant bodies or groups established at Union level under relevant Union legal acts provide non-binding recommendations to support Member States in the establishment, maintenance and secure operation of their respective national entry point. Those recommendations shall address technical, operational and organisational measures, taking into account experiences and lessons learned from existing reporting structures. Those recommendations shall include technical specifications to ensure interoperability between all Member States’ national entry points as referred to in paragraph 3 and to facilitate the alignment of incident notifications submitted via their respective national entry point with cross-border reporting obligations. (5) ENISA shall, by [18 months from the date of entry into force of this amending Regulation], in cooperation with Member States, develop an open-source solution that may be used by Member States in setting up their national entry point in accordance with paragraph 1, with the objective of strengthening interoperability between national systems and enable faster, more effective cross-border data sharing when a situation requires coordinated action
Official source passage and amending instruction
1a. The following Article 23b is added: ‘Article 23b National entry point for incident reporting (1) Member States shall establish and maintain a national entry point for the reporting of incidents and related events under the Union legal acts where those Union legal acts provide so. The national entry point may, depending on Member States’ organisational arrangement, allow for relevant tasks and functionalities in order to support and facilitate the reporting of incidents. (2) Member States shall retain flexibility to configure their national entry point in accordance with their existing national structures and the allocation of competences among authorities, including by connecting existing systems and enabling the sharing, routing or distribution of relevant information. (3) Member States shall endeavour to design their national entry point with a view to making the national entry points interoperable with the national entry points of other Member States. (4) ENISA shall, by [12 months from the date of entry into force of this amending Regulation], in consultation with the CSIRTs network, the Cooperation Group and other relevant bodies or groups established at Union level under relevant Union legal acts provide non-binding recommendations to support Member States in the establishment, maintenance and secure operation of their respective national entry point. Those recommendations shall address technical, operational and organisational measures, taking into account experiences and lessons learned from existing reporting structures. Those recommendations shall include technical specifications to ensure interoperability between all Member States’ national entry points as referred to in paragraph 3 and to facilitate the alignment of incident notifications submitted via their respective national entry point with cross-border reporting obligations. (5) ENISA shall, by [18 months from the date of entry into force of this amending Regulation], in cooperation with Member States, develop an open-source solution that may be used by Member States in setting up their national entry point in accordance with paragraph 1, with the objective of strengthening interoperability between national systems and enable faster, more effective cross-border data sharing when a situation requires coordinated action
Article 23b 1 Council draft
Article 23b
3 September 2026 · September Presidency compromise
Council wording reconstructed for this provision from the official operation
Article 23b National entry point for incident reporting (1) Member States shall establish and maintain a national entry point for the reporting of incidents and related events under the Union legal acts where those Union legal acts provide so. The national entry point may, depending on Member States’ organisational arrangement, allow for relevant tasks and functionalities in order to support and facilitate the reporting of incidents. (2) Member States shall retain flexibility to configure their national entry point in accordance with their existing national structures and the allocation of competences among authorities, including by connecting existing systems and enabling the sharing, routing or distribution of relevant information. (3) Member States shall endeavour to design their national entry point with a view to making the national entry points interoperable with the national entry points of other Member States. (4) ENISA shall, by [12 months from the date of entry into force of this amending Regulation], in consultation with the CSIRTs network, the Cooperation Group and other relevant bodies or groups established at Union level under relevant Union legal acts provide non-binding recommendations to support Member States in the establishment, maintenance and secure operation of their respective national entry point. Those recommendations shall address technical, operational and organisational measures, taking into account experiences and lessons learned from existing reporting structures. Those recommendations shall include technical specifications to ensure interoperability between all Member States’ national entry points as referred to in paragraph 3 and to facilitate the alignment of incident notifications submitted via their respective national entry point with cross-border reporting obligations. (5) ENISA shall, by [18 months from the date of entry into force of this amending Regulation], in cooperation with Member States, develop an open-source solution that may be used by Member States in setting up their national entry point in accordance with paragraph 1, with the objective of strengthening interoperability between national systems and enable faster, more effective cross-border data sharing when a situation requires coordinated action
Official source passage and amending instruction
1a. The following Article 23b is added: ‘Article 23b National entry point for incident reporting (1) Member States shall establish and maintain a national entry point for the reporting of incidents and related events under the Union legal acts where those Union legal acts provide so. The national entry point may, depending on Member States’ organisational arrangement, allow for relevant tasks and functionalities in order to support and facilitate the reporting of incidents. (2) Member States shall retain flexibility to configure their national entry point in accordance with their existing national structures and the allocation of competences among authorities, including by connecting existing systems and enabling the sharing, routing or distribution of relevant information. (3) Member States shall endeavour to design their national entry point with a view to making the national entry points interoperable with the national entry points of other Member States. (4) ENISA shall, by [12 months from the date of entry into force of this amending Regulation], in consultation with the CSIRTs network, the Cooperation Group and other relevant bodies or groups established at Union level under relevant Union legal acts provide non-binding recommendations to support Member States in the establishment, maintenance and secure operation of their respective national entry point. Those recommendations shall address technical, operational and organisational measures, taking into account experiences and lessons learned from existing reporting structures. Those recommendations shall include technical specifications to ensure interoperability between all Member States’ national entry points as referred to in paragraph 3 and to facilitate the alignment of incident notifications submitted via their respective national entry point with cross-border reporting obligations. (5) ENISA shall, by [18 months from the date of entry into force of this amending Regulation], in cooperation with Member States, develop an open-source solution that may be used by Member States in setting up their national entry point in accordance with paragraph 1, with the objective of strengthening interoperability between national systems and enable faster, more effective cross-border data sharing when a situation requires coordinated action
Competing proposals
European Parliament amendments
These are alternative tabled amendments. An amendment affecting several tracked parts appears once here, with each target identified.
No Parliament amendment is mapped to these tracked parts.
Selected texts
Compare wording
Choose a tracked part and a named pair of texts. Comparisons are offered only where both sides cover the same legal unit.
Select a specific tracked part above to compare wording.
No same-scope comparison is available for this tracked part. Its source wording remains available in the article text sections.