Free tool
Does NIS2 apply to you?
Your sector, the services that are in scope whatever your size, and your headcount and financials. A first read against Articles 2 and 3 of the directive.
First read
Choose a sector and enter your headcount, and the first read appears here.
A sorting aid, not legal advice. Nothing you enter leaves this browser.
What size of company does NIS2 apply to?
In the listed sectors, medium-sized enterprises and larger: 50 or more staff, or turnover and balance sheet both above €10 million. Some services are in scope whatever the size, such as DNS, TLD registries, trust services and public electronic communications.
What is the difference between essential and important entities?
Both must take the Article 21 risk-management measures and report significant incidents under Article 23. Essential entities are supervised proactively and face higher maximum fines; important entities are supervised after the fact.
Is this legal advice?
No. Each member state transposes NIS2 into its own law, can designate entities of any size, and counts group companies in the size test. Use the result to know which question to take to counsel or your national authority.
Trust, settled.
A self-check is a snapshot. Noru keeps the answer current, control by control.