Answer four quick questions for a rough idea of whether your organisation falls under the EU NIS2 directive. Your answers stay in your browser: nothing is sent or stored.

1. Where do you operate? I am established in an EU country I am outside the EU but provide services in the EU Neither

2. Which sector fits best? Pick the closest match for your main activity.

3. How big is the organisation?

Staff (full-time equivalents)

Fewer than 50 50 to 249 250 or more

Annual turnover and balance sheet total

Both €10 million or less Either above €10 million, but not both above €50 million (turnover) and €43 million (balance sheet) Turnover above €50 million and balance sheet above €43 million

4. Do any of these apply?

These can bring you in scope whatever your size.

Provider of public electronic communications networks or services Trust service provider, TLD name registry or DNS service provider Central government public administration entity Sole provider in an EU country of a service essential to critical societal or economic activity Identified as a critical entity under the EU CER Directive

Information only, not legal advice. Check the rules that apply in your country and with your own advisers.

Each EU country writes NIS2 into its own law, so thresholds, sectors and deadlines can differ. This tool follows the directive's general rules (Articles 2 and 3, Annexes I and II).

PRIVACY & COOKIES