Cybersecurity, which notoriously concerns both human and technological aspects, is becoming more and more regulated by a number of textual documents spanning several pages, such as the European GDPR Regulation and the NIS Directive. This paper introduces an approach that leverages techniques of semantic representation and reasoning, hence an ontological approach, towards the compliance check with the security measures that textual documents prescribe. We choose the ontology instrument to achieve two fundamental objectives: domain modelling and resource interrogation. The formalisation of entities and relations from the directive, and the consequent improved structuring with respect to sheer prose is dramatically helpful for any organisation through the hard task of compliance verification. The semantic approach is demonstrated with two articles of the new European NIS 2 directive.

翻译：网络安全因其涉及人类与技术双重维度而备受关注，如今正受到如欧洲《通用数据保护条例》（GDPR）和《网络与信息系统安全指令》（NIS Directive）等数页篇幅的文本文件的严格监管。本文提出一种利用语义表示与推理技术的方法，即本体论方法，以实现对文本文件所规定安全措施的合规性检查。我们选择本体工具以实现两个基本目标：领域建模与资源查询。对指令中实体及关系的形式化，以及由此带来的相较于纯粹散文式表述的结构化改进，将极大助力任何组织完成合规性验证这一艰巨任务。该语义方法以欧洲新NIS 2指令中的两个条款为例进行了论证。