The EU Cybersecurity Directive (‘NIS 2 Directive’) contains provisions on security obligations and incident reports in multiple sectors of society. In Finland, provisions on obligations under the NIS