NIS2 replaced the original NIS Directive and pulled thousands of mid-sized companies into scope for the first time — not just critical-infrastructure operators. If you provide digital services, healthcare, energy or transport, or sit in the supply chain of someone who does, you are very possibly in scope.
Free readiness call
Thirty minutes, with a specialist who holds a credential in NIS2 — not a generalist account manager.
Scope and entity-classification assessment (essential vs. important entity)
Risk management measure gap analysis against Article 21
Incident reporting workflow design — 24-hour early warning, 72-hour notification, final report
Supply chain and ICT third-party risk assessment
Management-body accountability briefing — NIS2 makes leadership personally answerable
Possibly. NIS2 scoping runs on sector and headcount/turnover thresholds, not a criticality label. Software, cloud, managed services and digital infrastructure providers are named sectors in their own right.
Up to €10 million or 2% of global annual turnover for essential entities, whichever is higher — plus potential personal liability for management.
Thirty minutes, free, with someone who holds a credential in the framework you're asking about.
Book a free 30-minute call