Assess your situation
Essential or important entity? Our tool determines your classification in 3 questions.
In force · 17 Oct 2024Penalties activeDay 564Updated 04 May 2026
160,000
organisations
must comply.
Is yours one?
An independent editorial resource for NIS2. Two minutes to know if you’re affected, and a concrete plan to get there.
Fig. 01 · Affected entities by member stateLive
In scopeOutside EU131,600 entities · 18 sectors
160,000
entities affected across Europe
18
sectors covered
€10M
maximum fine
72h
to report an incident
§01 · Where to start
Three questions every European board now has to answer.
01 / 03
Is my organisation affected?
Answer 3 questions to find out if NIS2 applies to your sector and size.
Run the test02 / 03What must I implement?
Governance, risk management, 72h notification: the 21 measures to deploy, explained simply.
Read the guide03 / 03What I risk
Fines up to €10M, personal liability for directors, bans from exercising management roles.
See the sanctions§02 · The path
Three steps to NIS2 compliance. Under ten minutes from start to plan.
Measure your gaps
21 checkpoints covering governance, technical measures and incidents. Tick what is in place.
Act with a clear plan
Get a compliance score and a prioritised action list, ready to share with your board.
§03 · Coverage
18 sectors. Two tiers of accountability. One baseline.
Health · Essential entity- 01EnergyEssential
- 02TransportEssential
- 03BankingEssential
- 04Financial marketsEssential
- 05HealthEssential
- 06Drinking waterEssential
- 07WastewaterEssential
- 08Digital infrastructureEssential
- 09ICT service mgmtEssential
- 10Public administrationEssential
- 11SpaceEssential
- 12Postal & courierImportant
- 13Waste managementImportant
- 14ChemicalsImportant
- 15FoodImportant
- 16ManufacturingImportant
- 17Digital providersImportant
- 18ResearchImportant
§04 · The bulletin
Understand NIS2 in depth.
GovernanceNIS2 Article 20: 5 boardroom responsibilities directors cannot delegate
Article 20 of Directive 2022/2555 moves cybersecurity formally into the boardroom. Here are the five responsibilities that now fall personally on directors.
Apr 18, 2025·10 min
Incident managementNIS2 incident notification: the practical 72-hour guide
A cyber incident strikes. The NIS2 clock starts. Here is exactly what you must do, hour by hour.
Apr 11, 2025·9 min
Supply chainNIS2 supply chain security: 5 clauses to require from your suppliers
Article 21(2)(d) of Directive 2022/2555 explicitly mandates supply chain security. Here are 5 concrete contractual clauses to add to every critical supplier contract.
Apr 09, 2025·7 min
Action · Run the checklist§ Action
Ready to put numbers on this?
Take the 21-point assessment. Score in two minutes. Walk away with a prioritised action plan ready to share with your board.