The revision of the 2016 Directive sets cybersecurity risks management and reporting obligations to companies, including companies in the HVACR sector. The proposal of the European Commission is now being examined and amended by the Council and the European Parliament.