# Does NIS2 require network monitoring?

NIS2 does not name network monitoring or NDR, but Article 21 lists incident handling among the required risk-management measures, and Article 23 requires significant incidents to be reported on a fixed timeline. You cannot report an incident you have not detected, so continuous network monitoring is one practical way to meet both.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/does-nis2-require-network-monitoring

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [What are the NIS2 incident reporting deadlines?](https://netsenx.com/en/faq/what-are-the-nis2-incident-reporting-deadlines)
- [Does NIS2 apply to mid-sized companies?](https://netsenx.com/en/faq/does-nis2-apply-to-mid-sized-companies)
- [Does NetSenX submit the NIS2 report for us?](https://netsenx.com/en/faq/does-netsenx-submit-the-nis2-report-for-us)
- [What are the NIS2 fines?](https://netsenx.com/en/faq/what-are-the-nis2-fines)
- [Who is responsible for NIS2 in a company?](https://netsenx.com/en/faq/who-is-responsible-for-nis2-in-a-company)