France NIS 2 Copilot
Navigate France's NIS 2 transposition process with clarity, from current NIS 1 obligations to the forthcoming framework
What the France NIS 2 Copilot Can Do
Understand the current NIS 1 obligations under loi n° 2018-133
Identify whether your entity may fall under NIS 2 annexe I or II sectors
Map Art. 21 NIS 2 risk management measures to the ANSSI ReCyF security objectives
Navigate the voluntary pre-registration process on MonEspaceNIS2
Interpret the Art. 23 NIS 2 incident notification timeline: 24 h, 72 h, and 1 month
Compare NIS 2 obligations with parallel regimes such as DORA, OIV/SIIV, and RGPD
About France NIS 2 Copilot
France has not yet promulgated its NIS 2 transposition law. The bill — projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité — was adopted by the Sénat on 12 March 2025 and is under examination by the Assemblée nationale. ISMS Copilot helps you understand both the operative NIS 1 regime and what the forthcoming French framework is expected to introduce.
Frequently Asked Questions
What is France NIS 2?
France NIS 2 refers to the French transposition of directive (EU) 2022/2555 (NIS 2). The transposition bill has not yet been promulgated; in the interim, the operative framework remains NIS 1, established by loi n° 2018-133 du 26 février 2018 and its implementing texts (décret n° 2018-384 and arrêté du 14 septembre 2018).
How does the France NIS 2 Copilot help?
The Copilot helps you understand the distinction between the current NIS 1 regime and the expected NIS 2 obligations at directive level (Arts. 21–23), interpret the ANSSI ReCyF preparatory reference framework, and identify how your organisation might position itself ahead of the law entering into force.
Is pre-registration on MonEspaceNIS2 a legal obligation?
No — the ANSSI has opened MonEspaceNIS2 for voluntary pre-registration since 24 November 2025 as a preparatory step; the legal obligation to register is conditional on the transposition law being promulgated and implementing decrees being published, neither of which has occurred.
Ready to streamline your compliance work?
Built for speed, accuracy, and audit-ready output.