The Directive on attacks against information systems