"The European Commission published the draft NIS Directive in February in a bid to ensure that banks, energy companies and other businesses involved in the operation of critical infrastructure maintained sufficiently secure systems." . . . . .