Question 1

Who is affected by NIS2?

Accepted Answer

NIS2 affects over 100,000 organisations across the EU directly. Affected are organisations in 18 defined sectors with at least 50 employees or 10 million euros annual revenue. Operators of digital infrastructure (DNS, cloud, data centres) are affected regardless of size. Many more organisations are indirectly affected through supply chain obligations.

Question 2

What are the 18 NIS2 sectors?

Accepted Answer

Annex I (essential): Energy, Transport, Banking, Financial market infrastructures, Healthcare, Drinking water, Waste water, Digital infrastructure, ICT services (B2B), Public administration, Space. Annex II (important): Postal and courier services, Waste management, Chemicals, Food, Manufacturing, Digital services, Research.

Question 3

What penalties apply for NIS2 violations?

Accepted Answer

Essential entities: up to 10 million euros or 2% of global annual turnover. Important entities: up to 7 million euros or 1.4% of global annual turnover. Additionally, personal management liability is established by the national NIS2 transposition law.

Is your organisation affected by NIS2?