Art 7 - National cybersecurity strategy

Article 7 obliges EU Member States to adopt and regularly update a national cybersecurity strategy that outlines objectives, risk-management measures, incident-response capabilities and governance structures. The strategy must be aligned with the EU NIS framework and reviewed at least every two years.