Network and Information Systems Regulations
E224086
The Network and Information Systems Regulations are UK cybersecurity laws that impose security and incident-reporting requirements on operators of essential services and certain digital service providers to improve the resilience of critical network and information systems.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Network and Information Systems Regulations canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T2004838 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Network and Information Systems Regulations Context triple: [Information Commissioner’s Office, appliesStatutoryRegulation, Network and Information Systems Regulations]
-
A.
New York State Department of Financial Services Cybersecurity Regulation
The New York State Department of Financial Services Cybersecurity Regulation is a pioneering set of cybersecurity requirements for financial institutions operating in New York, mandating robust risk-based programs, incident reporting, and governance to protect consumers and the financial system from cyber threats.
-
B.
Internet governance
Internet governance refers to the collective processes, policies, and institutions that shape the evolution, management, and use of the global Internet, including its technical standards, domain name system, and related public policy issues.
-
C.
NATO cyber structures
NATO cyber structures are the alliance’s integrated organizations, capabilities, and command arrangements dedicated to coordinating, defending, and conducting operations in cyberspace across member states.
-
D.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
-
E.
Secure Information Exchange Network Application
The Secure Information Exchange Network Application (SIENA) is Europol’s secure communication platform used by law enforcement authorities across Europe to exchange sensitive criminal intelligence and operational information.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Network and Information Systems Regulations Target entity description: The Network and Information Systems Regulations are UK cybersecurity laws that impose security and incident-reporting requirements on operators of essential services and certain digital service providers to improve the resilience of critical network and information systems.
-
A.
New York State Department of Financial Services Cybersecurity Regulation
The New York State Department of Financial Services Cybersecurity Regulation is a pioneering set of cybersecurity requirements for financial institutions operating in New York, mandating robust risk-based programs, incident reporting, and governance to protect consumers and the financial system from cyber threats.
-
B.
Internet governance
Internet governance refers to the collective processes, policies, and institutions that shape the evolution, management, and use of the global Internet, including its technical standards, domain name system, and related public policy issues.
-
C.
NATO cyber structures
NATO cyber structures are the alliance’s integrated organizations, capabilities, and command arrangements dedicated to coordinating, defending, and conducting operations in cyberspace across member states.
-
D.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
-
E.
Secure Information Exchange Network Application
The Secure Information Exchange Network Application (SIENA) is Europol’s secure communication platform used by law enforcement authorities across Europe to exchange sensitive criminal intelligence and operational information.
- F. None of above. chosen
Statements (43)
| Predicate | Object |
|---|---|
| instanceOf |
UK statutory instrument
ⓘ
cybersecurity regulation ⓘ information security law ⓘ |
| aimsToProtect |
availability of essential services
ⓘ
security of network and information systems supporting essential services ⓘ |
| appliesTo |
operators of essential services
ⓘ
relevant digital service providers ⓘ |
| basedOn | Directive (EU) 2016/1148 (NIS Directive) ⓘ |
| complements | data protection and privacy legislation in the UK ⓘ |
| containsConcept |
incident having a substantial impact
ⓘ
operator of essential services ⓘ relevant digital service provider ⓘ |
| country | United Kingdom ⓘ |
| enforcedBy |
Information Commissioner’s Office (for relevant digital service providers)
ⓘ
linked to:
Information Commissioner’s Office
competent authorities designated for each sector ⓘ |
| goal | to enhance national and EU-wide cyber resilience of critical services ⓘ |
| jurisdiction | United Kingdom ⓘ |
| legalBasis |
European Communities Act 1972 (for original transposition)
ⓘ
linked to:
European Communities Act 1972
|
| objective |
to ensure continuity of essential services
ⓘ
to manage risks to network and information systems used for essential services ⓘ |
| policyArea |
critical infrastructure protection
ⓘ
cybersecurity ⓘ |
| providesFor |
administrative fines for non-compliance
ⓘ
inspection and audit powers for competent authorities ⓘ |
| purpose |
to impose cybersecurity and incident-reporting obligations
ⓘ
to improve the security and resilience of network and information systems ⓘ |
| regulates |
incident reporting by operators of essential services
ⓘ
incident reporting by relevant digital service providers ⓘ security of network and information systems used to provide essential services ⓘ |
| relatedTo |
NIS Directive
ⓘ
linked to:
Directive (EU) 2016/1148 (NIS Directive)
UK National Cyber Security Strategy ⓘ |
| requires |
appropriate and proportionate technical and organisational security measures
ⓘ
cooperation with competent authorities and CSIRTs in incident handling ⓘ notification of incidents having a substantial impact on the provision of essential services ⓘ risk management practices for network and information systems ⓘ |
| scope |
online marketplaces, online search engines and cloud computing services (as digital service providers)
ⓘ
public and private entities operating essential services in specified sectors ⓘ |
| sectorCoverage |
digital infrastructure
ⓘ
digital service providers ⓘ drinking water supply and distribution ⓘ energy ⓘ health ⓘ transport ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Network and Information Systems Regulations Description of subject: The Network and Information Systems Regulations are UK cybersecurity laws that impose security and incident-reporting requirements on operators of essential services and certain digital service providers to improve the resilience of critical network and information systems.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.
Information Commissioner’s Office
→
appliesStatutoryRegulation
→
Network and Information Systems Regulations
ⓘ