Yes it is but i looks like many have missed it.. I think the directive is quite good even for non critical sectors.. I have a friend of mine working on IT at a large diary products company and they are having a massive project this winter/spring to upgrade their entire system to meet the directive and one morning my friend was called a 4 in the morning by his boss telling him he needed to come to work immediately because they were hacked..