Cyber-Downtime and Nursing Practice: Implications of Europe’s Network and Information Security (NIS2) Directive for Specialist Nursing Education

Healthcare now depends on digital systems for documentation, medication management, and continuity of care. When those systems fail during a cyber incident, nurses become the last reliable safeguard for patient safety at the bedside. Yet current training still leaves a gap between basic cyber awareness and the practical skills needed to manage care during downtime. The Network and Information Security (NIS2) Directive makes cybersecurity training a legal obligation for healthcare organizations, but nursing education across Europe has not yet turned that obligation into a formal clinical competency. Using Italy’s 2026 specialist nursing reform as a policy example, this editorial argues that cyber-downtime management, emergency paper documentation, incident communication, and simulation-based response should be embedded in specialist nursing curricula. Doing so would strengthen workforce readiness, improve patient safety, and reduce organizational vulnerability when digital systems fail. This editorial advances an evidence-informed normative proposal rather than an empirical study, and the proposed educational framework is preliminary and will require future validation.