Who does NIS2 apply to?

NIS2 applies to any entity that provides ‘essential’ or ‘important’ services that contribute to the economic and social development of the EU. Suppliers of these companies will also be affected, regardless of whether they are inside or outside the EU. If your customers fall into either of these categories, then they must comply with NIS2.

Essential entities
Important entities

Energy

Transport

Finance

Public administration

Health

Space

Water supply (drinking & wastewater)

Digital infrastructure [NEW]

Postal services [NEW]

Waste management [NEW]

Chemicals [NEW]

Research [NEW]

Food [NEW]

Manufacturing [NEW]

Digital service providers [NEW]

Size threshold: Varies by sector, but generally:

  • 250+ employees
  • €50+ million annual turnover
  • €43 million+ balance sheet

Size threshold: Varies by sector, but generally:

  • 50+ employees
  • €10+ million annual turnover
  • €10+ million balance sheet

In some cases, an entity might still be considered ‘essential’ or ‘important’ even if it doesn’t meet the size criteria (for example, if it’s the sole provider of a critical service for societal and economic activity in a member state).

Next section:

Discover what NIS2 requires.

Next page >

© 2024 Westcon-Comstor

westconcomstor.com | Legal | Privacy and cookies