NIS Compliance & Oversight process

Guidance for other regulated areas such as water transport, air transport, digital infrastructure or digital service providers should refer to their relevant Competent Authority NIS guidance. References to these sites can be found in the useful contacts section of this website.

Operators of Essential Service have a duty to be compliant with the NIS Regulations. The NIS Competent Authority guidance for OES describes key aspects of the NIS Regulations and how it applies to them. This combined with the NIS oversight process explains how the NIS Competent Authority will gain confidence from an OES of compliance with the regulations.

Key guidance documents and resources needed by an OES as part of the oversight lifecycle are available below:-

• OES Registration Form
• NIS Guidance for OESs 
• Oversight Process for OESs
• CAF Assessment Guidance
• CAF Assessment Template
• NIS Audit Guidance
• NIS Enforcement Guidance