Comment on ENISA: mapping the regulatory NIS situation in Europe