Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union. 4 Directive (EU) 2016/1148, ANNEX Ⅱ, 2016 O.J. (L 194) 1, 27, 5(2), at 14, ANNEX Ⅲ, at 30, at 8, art. 7, at 15, art. 11, at 17, art. 12, at 19, art. 12, at 19, art. 8, at 16, art. 9, at 17