Cybersecurity

cybersecurity legal skills for European Union

The EU's cybersecurity framework has grown into one of the world's most demanding compliance environments, with the NIS2 Directive extending mandatory incident-reporting and risk-management obligations to a significantly broader set of essential and important entities than its predecessor, while the Cyber Resilience Act introduces baseline security requirements for connected products placed on the single market. Practitioners advising on this landscape must simultaneously track transposition differences across Member States, coordinate with national computer security incident response teams, and read NIS2 alongside the GDPR — because a breach that triggers one regime almost always engages the other. The cybersecurity legal skills for the European Union in the ThomasMore catalog are built for exactly that layered, multi-instrument work.

Each skill is agent-ready, covering tasks such as mapping an entity's classification as essential or important under NIS2, drafting incident-notification timelines and board-level reporting structures, screening product security requirements under the Cyber Resilience Act, or cross-referencing obligations with GDPR breach notification duties under Article 33. They run over MCP or are available as downloads, integrating into the workflow your team already uses rather than requiring a separate platform. The ThomasMore catalog lets you filter by license or author, so you can identify community-maintained skills that track regulatory guidance from ENISA or national supervisory authorities as it emerges. Use the filters above to narrow by Member State transposition or by the specific instrument your matter turns on.