
NIS2 in healthcare: what IT teams must instrument
Operational NIS2 evidence for a healthcare IT team: Articles 21 and 23 of Directive (EU) 2022/2555, the 24 h / 72 h / one-month clocks, national CSIRT versus GDPR Art. 33, and why Annex I is not automatic essential-entity status.




