NIS Directive and NIS Regulations 2018: Ofgem guidance for Operators of Essential Services


Publication date

The Network and Information Systems (‘NIS’) Directive transposed into UK law as The Network and Information Systems Regulations 2018 (‘NIS Regulations’), and came into force on 10 May 2018.

This updated guidance supports Operators of Essential Services with their cyber security provisions under the regulations.

Subsidiary Documents updated 26 May 2023

Updated Subsidiary documents (NIS Reporting templates) published on 26 May 2023 should be used for all measures from 01 July 2023. These document provides further clarifications and updates from previous versions published in April 2022. Details of changes can be found in the decision document published on 26 May 2023.