--- title: "NIS2 Directive: What Obligations Apply to Mobile Applications and Usage?" description: Effective from October 2024, the European NIS2 Directive aims to enhance the protection of critical infrastructures against cyberattacks. image: https://blog.pradeo.com/hubfs/Design%20sans%20titre%20(6).png --- [![pradeo\_logo\_color](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_color.png?width=220&height=33&name=pradeo_logo_color.png "pradeo_logo_color")](https://pradeo.com) - Solutions - [Mobile Threat Defense](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Secure Private Store](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Mobile Application Compliance Audit](https://pradeo.com/en/solutions/mobile-application-security/application-compliance-audit/) - [Runtime Application Self Protection](https://pradeo.com/en/solutions/mobile-application-security/rasp/) - [Shielding](https://pradeo.com/en/solutions/mobile-application-security/application-shielding/) - [Application Security Testing](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - Use cases - [Cybersecurity in MDM/ UEM](https://pradeo.com/en/use-cases/cybersecurity-in-mdm-uem/) - [Securing mobile devices](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Securing Mobile Applications](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - [Malware / leakware protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Phishing protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Ensuring compliance for applications](https://pradeo.com/en/compliance/) - [Ensuring compliance for mobile fleet](https://pradeo.com/en/compliance/) - [Securing BYOD](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Become partner](https://pradeo.com/become-partner/) - Resources - [Solution briefs](https://pradeo.com/en/resources/?solution-briefs) - [Customer Cases](https://pradeo.com/en/resources/?customer-cases) - [Integration briefs](https://pradeo.com/en/resources/?integration-briefs) - [White Papers](https://pradeo.com/en/resources/?white-papers) - [Analyst reports & guides](https://pradeo.com/en/resources/?analyst-reports-guides) - [On demand webcast](https://pradeo.com/en/resources/?webcasts-on-demand) - [About us](https://pradeo.com/en/about/) - [Blog](https://blog.pradeo.com/) - [Contact](https://pradeo.com/contact/) - en - [**FR**](https://blog.pradeo.com/fr) - [**DE**](https://blog.pradeo.com/de) ### Topics - Select a Topic ### Stay up to date SUBSCRIBE TO OUR BLOG ### Stay up to date [News](https://blog.pradeo.com/topic/news) # NIS2 Directive: What Obligations Apply to Mobile Applications and Usage? ![Picture of Roxane Suau](https://blog.pradeo.com/hubfs/roxane-suau.jpg) By [Roxane Suau](https://blog.pradeo.com/author/roxane-suau) on July, 3 2025 [mailto:?subject=Take%20a%20look%20at%20this%20article](mailto:?subject=Take%20a%20look%20at%20this%20article) ![](https://blog.pradeo.com/hubfs/Design%20sans%20titre%20(6).png) The European NIS2 Directive aims to enhance the protection of critical infrastructures against cyberattacks. With a broader scope and stricter requirements compared to the 2016 NIS Directive, it mandates rigorous compliance to safeguard critical information systems, including mobile devices and services provided through applications. Its objective? Ensuring the continuity of essential services while holding companies accountable for digital risks.   ## Which organizations are affected by the NIS2 Directive? > Thierry Breton, Commissioner for the Internal Market, explains: “Cyber threats have become bolder and more complex. It was imperative to adapt our security framework to the new realities and to make sure our citizens and infrastructures are protected. \[...\] With the agreement on NIS2, we modernise rules to secure more critical services for society and the economy.” NIS2 covers a wide range of entities considered essential or important, including the following highly critical sectors: - Public administration - Drinking water - Wastewater - Energy - Space - IT services management (B2B) - Financial market infrastructures - Digital infrastructures - Healthcare - Banking - Transport And these other critical sectors: - Chemical production and distribution - Digital service providers - Waste management - Manufacturing - Food production, processing, and distribution - Research - Postal and courier services NIS2 applies to all companies in the above-mentioned sectors that operate or provide services within the European Union. This includes both EU-based companies and foreign entities offering services to EU citizens in the relevant sectors.   ## Mobile services now within the scope A key advancement in this updated directive is the explicit inclusion of mobile services within the context of online services. The preamble to NIS2 acknowledges: “Cloud computing services should include digital services enabling on-demand management and broad remote access \[...\], including those provided on mobile phones, tablets, laptops, and desktops.” This explicit recognition of mobile services reflects today’s realities, where mobile devices play a pivotal role in both professional and personal digital activities. As mobile applications become integral to business processes and sensitive exchanges, smartphones and tablets have emerged as significant risk vectors. By including these devices in its scope, the European Parliament mandates that organizations treat mobile terminals as a fundamental component of their overall cybersecurity strategy. ## Article 21: An "All-Risk" Approach Article 21 of the NIS2 Directive outlines cybersecurity risk management measures. One key aspect is managing risks related to partners and subcontractors, emphasizing the notion of shared responsibility in cybersecurity. Organizations are required to assess supplier vulnerabilities, product quality, cybersecurity practices, and secure development procedures. To comply, businesses must adopt a proactive, comprehensive cybersecurity approach. This includes regularly evaluating risks, detecting vulnerabilities, and implementing preventive measures, such as regular security audits, penetration tests, and employee training. In the event of a security incident, organizations must report the attack to competent authorities within 24 hours and provide a full report within 72 hours to enable a coordinated response.   ## How Pradeo ensures compliance with the NIS2 Directive To meet NIS2 requirements, Pradeo offers organizations solutions to secure mobile devices and applications, which are prime targets for cyberattacks in sensitive sectors. ### Application Security Pradeo's application security suite protects the entire lifecycle of applications. It includes a [source code analysis solution](https://hubs.ly/Q02Z0XQ40) (SAST) that audits the code of web and mobile applications to detect and correct vulnerabilities. Additionally, [shielding](https://hubs.ly/Q02Z0XSH0) strengthens mobile app security against malicious tampering, and [Runtime Application Self-Protection](https://hubs.ly/Q02Z0XXb0) (RASP) offers real-time defense against intrusions. Pradeo’s compliance audit solution also verifies the security of externally developed mobile apps before their market release. Moreover, our longstanding [compliance audit solution](https://hubs.ly/Q02Z0X_30) ensures the security of mobile applications developed externally or relying on external libraries, validating their safety before they are brought to market.   ### Smartphone and Tablet Protection Pradeo's [Mobile Threat Defense](https://hubs.ly/Q02Z0XBY0) (MTD) solution identifies, analyzes, and blocks mobile cyberthreats in real-time, ensuring proactive device protection and securing sensitive data and professional communications, even in high-risk scenarios.   The NIS2 Directive marks a critical shift for European businesses in cybersecurity. It provides a framework for enhancing digital defenses while encouraging organizations to rethink risk management practices. > “Cybersecurity was always essential to shield our economy and society against cyber threats; it is becoming critical as we move further in the digital transition. \[...\]By agreeing on these further strengthened rules, we are delivering on our commitment to enhance our cybersecurity standards in the EU. Today, the EU shows its clear determination to champion preparedness and resilience against cyber threats.” — Margaritis Schinas, Vice-President for Promoting the European Way of Life Would you like to learn more about how Pradeo can assist you? [Contact us today for a personalized assessment.](https://meetings.hubspot.com/team-pradeo) ###### About The Author [More from this author](https://blog.pradeo.com/author/roxane-suau) ![](https://blog.pradeo.com/hs-fs/hubfs/roxane-suau.jpg?height=100&name=roxane-suau.jpg) ###### Roxane Suau #### Recommended articles [![Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/hubfs/Template%20article%20(40).png)](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1) ###### [Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1) \- September 1, 2026 [![RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/hubfs/Template%20article%20(37)-2.png)](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android) ###### [RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android) \- July 23, 2026 [![What Google's latest report reveals about mobile threats](https://blog.pradeo.com/hubfs/Template%20article%20(35)-1.png)](https://blog.pradeo.com/what-googles-latest-report-reveals-about-mobile-threats) ###### [What Google's latest report reveals about mobile threats](https://blog.pradeo.com/what-googles-latest-report-reveals-about-mobile-threats) \- July 10, 2026 ### Popular articles ### Stay up to date ### Recent articles ### Articles récents [Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1) \- 3 July, 2025 [RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android) \- 3 July, 2025 [What Google's latest report reveals about mobile threats](https://blog.pradeo.com/what-googles-latest-report-reveals-about-mobile-threats) \- 3 July, 2025 [Android: The 4th zero-day vulnerability patched in six months](https://blog.pradeo.com/android-the-4th-zero-day-vulnerability-patched-in-six-months-1) \- 3 July, 2025 [Vibe Coding: when AI-generated code multiplies vulnerabilities](https://blog.pradeo.com/vibe-coding-when-ai-generated-code-multiplies-vulnerabilities) \- 3 July, 2025 ### Topics - [Mobile Security (56)](https://blog.pradeo.com/topic/mobile-security) - [Mobile Application Security (46)](https://blog.pradeo.com/topic/mobile-application-security) - [Expertise (31)](https://blog.pradeo.com/topic/expertise) - [Security Alert (30)](https://blog.pradeo.com/topic/security-alert) - [Cybersecurity (29)](https://blog.pradeo.com/topic/cybersecurity) - [News (28)](https://blog.pradeo.com/topic/news) - [Partners (25)](https://blog.pradeo.com/topic/partners) - [Corporate (12)](https://blog.pradeo.com/topic/corporate) - [Events (4)](https://blog.pradeo.com/topic/events) - [Actualité (2)](https://blog.pradeo.com/topic/actualité) - [predictions (2)](https://blog.pradeo.com/topic/predictions) - [cyberattack (1)](https://blog.pradeo.com/topic/cyberattack) see all [![New Call-to-action](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f) ### Get in touch with mobile security experts [Contact us](https://www.pradeo.com/en-US/contact-us) [![](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_white_square.png?width=90&height=74&name=pradeo_logo_white_square.png)](https://pradeo.com) European leader in mobile security, Pradeo protects business mobile devices and applications. [Read More](https://www.pradeo.com/en-US/) - [Resources](https://www.pradeo.com/en-US/pradeo-ressources#white_papers) - [UEM security](https://www.pradeo.com/en-US/uem-mdm-security) - [Use cases](https://www.pradeo.com/en-US/pradeo-ressources#use-case) - [Data protection](https://www.pradeo.com/en-US/mobile-data-privacy-regulation) - [Contact us](https://www.pradeo.com/en-US/contact-us) - [Mobile Threat Defense](https://www.pradeo.com/en-US/mobile-threat-defense) - [Mobile Application Security Testing](https://www.pradeo.com/en-US/application-security-testing) - [In-App Protection](https://www.pradeo.com/en-US/in-app-protection) - [Secure Private Store](https://www.pradeo.com/en-US/private-app-store) - [Mobile Threat Intelligence](https://www.pradeo.com/en-US/mobile-threat-intelligence#perso-threat-intelligence) ![email.svg](https://cdn2.hubspot.net/hubfs/3067823/awwal/email.svg "email.svg") [contact@pradeo.com](mailto:contact@pradeo.com) Copyright @ 2022. All Right Reserved. - - - ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Roxane Suau" }, "dateModified" : "July 3, 2025, 11:21:20 AM", "datePublished" : "2025-07-03 11:20:59", "description" : "Effective from October 2024, the European NIS2 Directive aims to enhance the protection of critical infrastructures against cyberattacks.", "headline" : "NIS2 Directive: What Obligations Apply to Mobile Applications and Usage?", "image" : { "@type" : "ImageObject", "url" : "https://2378615.fs1.hubspotusercontent-na1.net/hubfs/2378615/Design%20sans%20titre%20%286%29.png" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://2378615.fs1.hubspotusercontent-eu1.net/hubfs/2378615/Logo%20Pradeo%20D%C3%A9grad%C3%A9%20Long%20Couleurs.svg" }, "name" : "Pradeo" } } ```