For the purposes of this Regulation, the following definitions apply:

(1) "cybersecurity" means the activities necessary to protect network and information systems, the users of such systems, and other persons affected by cyber threats;

(2) "network and information system" means a network and information system as defined in point (1) of Article 4 of Directive (EU) 2016/1148;

(3) "national strategy on the security of network and information systems" means a national strategy on the security of network and information systems as defined in point (3) of Article 4 of Directive (EU) 2016/1148;

(4) "operator of essential services" means an operator of essential services as defined in point (4) of Article 4 of Directive (EU) 2016/1148;