Ahead of the review of the NIS directive, what areas for improvement, if any, can already be identified?

There’s not just AI, but what about Quantum and Post-Quantum? Are we seeing this is a serious threat? Which organizations (enterprises, governments, etc) are actively preparing a solution?

Before suggesting improvements, may I ask the community whether there are any data or reports out on the status of NIS implementation? I.e. to which degree has NIS been practically applied in the member states, by European institutions themselves, according to qualitative and quantitative performance indicators?
Thanks for helping out.