NIS2 Banking — Malta
The sector “Banking” is named in the NIS2 law of Malta (Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order). Below is the relevant provision of the national law, verbatim, with the official source reference.
What the law says
Banking (i) Credit institutions as defined in Article 4, point (1), of CIP Department as the
Regulation (EU) No 575/2013. national supervisory authority.
4. Financial Market (i) Operators of trading venues as defined in Article 4, point (24), CIP Department as the
Infrastructure of Directive 2014/65/EU. nationalReference: S.L. 460.41, First Schedule
The provision is part of S.L. 460.41, First Schedule, which corresponds to Annex I of the NIS2 Directive (EU) 2022/2555 (sectors of high criticality).
Is your company in scope?
The scope of the obligations depends on entity type and size — within the same sector a company can be an essential entity, an important entity, or out of scope. The free applicability check gives the exact answer.
Frequently asked questions
Does NIS2 apply to the “Banking” sector in Malta?
Yes. The law of Malta (S.L. 460.41, S.L. 460.41, First Schedule) names this sector directly — the provision text is on this page, verbatim.
Is every company in this sector covered by NIS2?
No — the obligation depends on entity type and size. The sector being listed (S.L. 460.41, First Schedule) is the first condition; the classification (essential or important entity) comes from the free applicability check.
Which law regulates this sector?
Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order — S.L. 460.41, S.L. 460.41, First Schedule. The official source link is on this page.