Skip to content

Does NIS2 apply to my company?

Two questions decide it: are you in a listed sector, and do you meet the threshold from Recommendation 2003/361/EC (more than 50 FTE and more than EUR 10M turnover or balance sheet). Below that you are only indirectly in scope, via your customers. The threshold determines whether you are an important or essential entity depending on sector.

Try this first

  1. 1Check the sector. Annexes I and II list energy, transport, water, banking, financial markets, health, government, digital infrastructure, ICT service management, space, food, chemicals, manufacturing of critical goods, digital providers, and research.
  2. 2Count headcount and revenue. Below 50 FTE and EUR 10M revenue you are out of direct scope, unless you are the only NL provider of that service.
  3. 3Do you serve a customer who is in scope? Then NIS2 reaches you indirectly through their supplier management, contractually.
  4. 4Use the official RDI NIS2 self-assessment to confirm whether you are an essential or important entity.
  5. 5Write down the result with date and source. Re-run when the law or your revenue changes.

When to bring us in

Unclear sector classification or you supply multiple essential entities at once? Then a legal review beats guessing.

See also

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.

Who are you?

For the AI question we need your email and company, so we can follow up if the AI gets stuck, and to prevent abuse.

Limited to 2 questions per hour and 5 per day, kept lean so the AI stays useful. For more, contacting us directly works better for you and us.

Or skip the DIY entirely

Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.