In force since 17 Oct 2024·Day 601·

In force · 17 Oct 2024Penalties activeDay 601

160,000
organisations
must comply.
Is yours one?

An independent editorial resource for NIS2. Two minutes to know if you’re affected, and a concrete plan to get there.

Get my NIS2 scoreRead the guide
Fig. 01 · Affected entities by member stateLive
In scopeOutside EU131,600 entities · 18 sectors

160,000

entities affected across Europe

18

sectors covered

€10M

maximum fine

72h

to report an incident

§01 · Where to start

Three questions every European board now has to answer.

01 / 03

Is my organisation affected?

Answer 3 questions to find out if NIS2 applies to your sector and size.

Run the test02 / 03

What must I implement?

Governance, risk management, 72h notification: the 21 measures to deploy, explained simply.

Read the guide03 / 03

What I risk

Fines up to €10M, personal liability for directors, bans from exercising management roles.

See the sanctions

§02 · The path

Three steps to NIS2 compliance. Under ten minutes from start to plan.

Assess your situation

Essential or important entity? Our tool determines your classification in 3 questions.

Measure your gaps

21 checkpoints covering governance, technical measures and incidents. Tick what is in place.

Act with a clear plan

Get a compliance score and a prioritised action list, ready to share with your board.

Start the assessment

§03 · Coverage

18 sectors. Two tiers of accountability. One baseline.

Healthcare professional in a hospital corridor — example of an Essential entity under NIS2Health · Essential entity
  1. 01EnergyEssential
  2. 02TransportEssential
  3. 03BankingEssential
  4. 04Financial marketsEssential
  5. 05HealthEssential
  6. 06Drinking waterEssential
  7. 07WastewaterEssential
  8. 08Digital infrastructureEssential
  9. 09ICT service mgmtEssential
  10. 10Public administrationEssential
  11. 11SpaceEssential
  12. 12Postal & courierImportant
  13. 13Waste managementImportant
  14. 14ChemicalsImportant
  15. 15FoodImportant
  16. 16ManufacturingImportant
  17. 17Digital providersImportant
  18. 18ResearchImportant

§04 · The bulletin

Understand NIS2 in depth.

NIS2 essential and important entities: the 4 scope testsScope & compliance

NIS2 essential and important entities: the 4 scope tests

NIS2 essential and important entities are defined by Articles 2 and 3 of Directive 2022/2555. Four tests settle whether a company is in scope.

10 June 2026·7 min
NIS2 multi-factor authentication: 5 access classes that need itTechnical measures

NIS2 multi-factor authentication: 5 access classes that need it

NIS2 multi-factor authentication is no longer optional. Article 21(2)(j) names it; Implementing Regulation 2024/2690 specifies which factors qualify.

11 May 2026·7 min
NIS2 transposition status: where the four markets stand in 2026National execution

NIS2 transposition status: where the four markets stand in 2026

NIS2 transposition status diverges sharply across France, Germany, Spain and Italy. Italy has transposed; the others run on draft texts. Here is the framework.

May 6, 2026·7 min
Read all articles
Boardroom mid-discussion — the moment a board agrees to commission the assessmentAction · Run the checklist

§ Action

Ready to put numbers on this?

Take the 21-point assessment. Score in two minutes. Walk away with a prioritised action plan ready to share with your board.

Run the checklist