0 of 7 answered
Where is your organisation established? NIS2 generally applies in the member state where you are established. This kit is written for Estonia's Cybersecurity Act and works as a baseline elsewhere in the EU.
Which sector is your main activity in? Sectors of high criticality are listed in Annex I of the Directive, other critical sectors in Annex II.
Does any of these apply to you? These are in scope regardless of size.
Select all that apply
How many people work for the organisation (full-time equivalent)?
Annual turnover?
Balance sheet total?
Do customers ask you to meet NIS2 or cybersecurity requirements (questionnaires, contract clauses, audits)? Organisations in scope must manage the security of their direct suppliers (Art. 21(2)(d)), so the requirements flow down to suppliers who are not in scope themselves.