EU passed the NIS directive, its first ever cyber security rules