NIS2 Compliance Assessment

Complete this professional assessment to determine your organization's NIS2 directive obligations. This evaluation is based on the latest regulatory requirements and covers all essential criteria.

What is your organization's primary business sector?

What is your organization's current employee count?

What is your organization's annual revenue?

Does your organization provide critical services or infrastructure?

In which EU member state is your organization primarily established?

Require Comprehensive Compliance Assessment?

Access detailed analysis and implementation guidance for your organization's NIS2 compliance requirements

Access Professional Assessment

Jurisdiction-Specific Requirements

Frequently Asked Questions

What is the NIS2 Directive and its scope?
The NIS2 Directive (Directive (EU) 2022/2555) is a comprehensive cybersecurity regulation that came into effect on January 16, 2023. It establishes harmonized cybersecurity requirements across EU member states for entities operating in essential and important sectors, aiming to enhance the overall cybersecurity posture of the European Union. Read the full directive here.
Which organizations fall under NIS2 requirements?
Organizations operating in essential sectors (energy, transport, banking, financial markets, health, water, digital infrastructure) and important sectors (postal services, waste management, chemicals, food production, manufacturing, digital services) that meet specific size thresholds (50+ employees or €10M+ annual revenue) are subject to NIS2 requirements.
What are the mandatory compliance requirements?
NIS2 mandates implementation of appropriate technical and organizational measures including: risk management frameworks, incident response procedures, business continuity planning, supply chain security, vulnerability management, access control measures, and regular security assessments. Organizations must also establish governance structures and ensure management accountability.
What are the penalties for non-compliance?
Non-compliance penalties are substantial: essential entities face fines up to €10 million or 2% of annual global turnover, while important entities face fines up to €7 million or 1.4% of annual global turnover. Additionally, management personnel may face personal sanctions including temporary prohibitions from exercising management functions.
What are the implementation deadlines?
EU member states were required to transpose NIS2 into national legislation by October 17, 2024. Implementation deadlines vary by jurisdiction as each member state establishes its own timeline. Organizations should consult their national cybersecurity authorities for specific compliance deadlines in their jurisdiction.