Directive 2016/1148 aims to ensure a high and common level of security of networks and information systems throughout the European Union. This regulation urges Member States to implement measures to protect the cybersecurity of essential digital services and services in order to strengthen the resilience and security of such infrastructure.
This Directive was transposed into the Spanish legal order, establishing the obligation of socially and economically strategic operators to manage risks and to inform the authorities of relevant security incidents. The aim is ultimately to promote coordination in the face of cyberthreats and to ensure the continued functioning of essential services.