European Parliament approved the NIS2 Directive, a modernized framework based on the EU Network and Information Security Directive, on a 577-6 vote. Parliament said the directive brings new provisions and increased obligations concerning "incident response, supply chain security, encryption and vulnerability disclosure" for private and many public entities. "Ransomware and other cyber threats have preyed on Europe for far too long. We need to act to make our businesses, governments and society more resilient to hostile cyber operations," Dutch Member of European Parliament Bart Groothuis said. The legislation now awaits approval from the Council of the European Union.