Network cyber security

On 10 May 2018, the Network and Information Systems (NIS) Directive was transposed into UK law as The Network and Information Systems Regulations 2018 (NIS Regulations). It applies to the water, health, transportation, digital and energy sectors.

The NIS Regulations impose new duties on Operators of Essential Services (OES) and give relevant Competent Authorities new powers and responsibilities to ensure OES are meeting those duties. OES are those electricity and gas operators who are determined by thresholds defined in the NIS Regulations and by the Department for Business, Energy and Industrial Strategy (BEIS).

Ofgem has been designated in the NIS Regulations as joint Competent Authority with the BEIS for the downstream gas and electricity sectors in Great Britain.

We have issued guidance for operators of essential services in relation to the NIS regulations.