Sandra Schmitz-Berndt, LL.M., LL.M., is Research Associate at SnT, University of Luxembourg, working on the project EnCaViBS (<https://encavibs.uni.lu/>) with Mark Cole, for correspondence <sandra.schmitz@uni.lu>; Fabian Anheiner is student in law at the Universität Trier. The research for this article was funded by the Luxembourg National Research Fund (FNR) C18/IS/12639666/EnCaViBS/Cole, <https://www.fnr.lu/projects/the-eu-nis-directive-enhancing-cybersecurity-across-vital-business-sectors-encavibs/>.