Guide
NIS2 explained at EU level
What Directive (EU) 2022/2555 requires of organisations, in plain English. Each page cites the articles of the directive. Registration, authorities and exact deadlines are set by national law, so we point you to the transposition status and our country versions where they exist.
ChecklistFree printable NIS2 checklist: 34 checkpoints on management duties, registration, incident reporting and the ten measures of Article 21 NIS2.Transposition statusNIS2 transposition in all 27 Member States: national laws, dates of entry into force and competent authorities, with links to our country versions.Who is in scopeIs your organisation covered by NIS2? Sectors in Annexes I and II, size thresholds, essential and important entities, and why national law has the final word.RegistrationNIS2 registration explained: what Article 3(4) and Article 27 require, which details you submit, which deadlines apply and why the portal is national.Ten measuresThe ten minimum measures of Article 21(2) NIS2 in practice: what each one means, what counts as evidence and how Implementing Regulation 2024/2690 adds detail.Incident reportingNIS2 incident reporting under Article 23: when an incident is significant, the 24-hour, 72-hour and one-month deadlines and what each report contains.Management dutiesWhat Article 20 NIS2 requires of boards and managing directors: approving measures, overseeing them, regular training, personal liability and possible bans.Fines and supervisionNIS2 fines and supervision under Articles 32 to 34: minimum fine ceilings for essential and important entities, inspections and national differences.