The Law for the Implementation of NIS2 in Bulgaria aims to transpose the EU's NIS2 Directive into national law. The NIS2 Directive (Directive (EU) 2022/2555) aims to harmonize cybersecurity standards across EU member states, introducing stricter requirements, expanding the scope of affected sectors, and imposing more serious sanctions for non-compliance. The Bulgarian law will amend and supplement the existing Cybersecurity Act to align with NIS2. It introduces two categories of entities: 'essential' and 'important,' based on size and sectoral importance, covering a wider range of organizations than the original NIS directive. The law includes enhanced risk management obligations and stricter incident reporting duties .