/**
 * UK Network and Information Systems Regulations 2018 Compliance Pack
 *
 * Statute: The Network and Information Systems Regulations 2018
 *   (SI 2018/506), as amended. The UK transposition of the original EU
 *   NIS Directive ((EU) 2016/1148), retained in UK law post-Brexit. The
 *   Cyber Security and Resilience Bill (announced King's Speech 2024)
 *   is expected to update the regime; the regulations remain in force
 *   until and unless that Bill is passed.
 *
 * Jurisdiction: GB (United Kingdom)
 * Authority: Designated competent authorities by sector:
 *   - Energy: Ofgem + DESNZ + DfI (NI)
 *   - Drinking water: DEFRA + DAERA (NI) + Drinking Water Inspectorate
 *   - Health: DHSC + relevant Health Departments (devolved)
 *   - Transport: DfT + DAERA (NI) + ORR
 *   - Digital infrastructure: NCSC (DSPs) + Ofcom (TSPs) + DSIT
 *   - Banking + financial market infrastructure: HMT + Bank of England
 *
 * Why this pack:
 *   - UK NIS Regs are the statutory basis for the cyber-resilience duty
 *     on Operators of Essential Services (OES) and Relevant Digital
 *     Service Providers (RDSPs). They are distinct from the EU NIS2
 *     Directive (covered by the `nis2` pack) — UK did NOT adopt NIS2;
 *     UK NIS Regs 2018 remain in force (with amendments tracked here).
 *   - The NCSC CAF (covered by `ncsc-caf` pack) is the operational
 *     evidence framework competent authorities use to assess compliance
 *     with the statutory duties in UK NIS Regs Reg 10 (security
 *     requirements) and Reg 11 (incident notification).
 *
 * Key statutory duties:
 *   - Reg 10: appropriate and proportionate technical and organisational
 *     measures to manage risks to network and information systems.
 *   - Reg 11: notify the relevant competent authority within 72 hours of
 *     any NIS incident having a significant impact on the continuity of
 *     the essential service or digital service.
 *   - Reg 12: cooperate with the competent authority during an
 *     investigation; provide information on request.
 *   - Reg 13: register as an OES / RDSP with the relevant competent
 *     authority before service goes live.
 *   - Reg 17: penalties — civil monetary penalties up to £17 million
 *     (or 4% of turnover for repeat / persistent contravention) for
 *     non-compliance with Reg 10 / Reg 11 duties.
 *
 * Significant-impact thresholds for incident notification (Reg 11):
 *   - Number of users affected
 *   - Duration of disruption
 *   - Geographical scope
 *   - Severity of disruption to functioning of the service
 *   - Extent of impact on economic and societal activities
 *
 * Out of scope:
 *   - EU NIS2 Directive (separate pack: `nis2`)
 *   - NCSC CAF assessment-evidence framework (separate pack: `ncsc-caf`)
 *   - Cyber Security and Resilience Bill (when passed, this pack will
 *     be amended; tracker comment in metadata)
 *   - Cyber Essentials self-assessment (separate pack: `cyber-essentials`)
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const UK_NIS_REGS_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const UK_NIS_REGS_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
};
//# sourceMappingURL=uk-nis-regs.d.ts.map