GovWire

This guidance sets out how the Network and Information Systems Regulations 2018 (NIS regulations) gives powers to competent authorities to issue enforcement notices and penalties to designated operators of essential services when they fail to comply with their obligations.

As the competent authority for the rail, road and maritime sectors and the joint competent authority for the aviation sector with the Civil Aviation Authority, the Secretary of State for Transport is responsible for the oversight and enforcement of the NIS Regulations. The enforcement management model (EMM) supports and clarifies this process.