NIS2 · Directive (EU) 2022/2555 · BSIG

Does NIS2 apply to your organisation – and what follows from it?

Four checks without a login, every answer with its article. Start with the question you have today.

Tested rule engines · every answer with its article · nothing is stored · open points are named

Start here

Does NIS2 apply to our organisation?

Art. 2, 3 NIS2 · Empf. 2003/361/EG · § 28 BSIG

Assess your organisation by sector, size and group structure. Get a reasoned category with legal references.

Not sure yet whether NIS2 affects you? Then this is your first check.

5 steps · PDF note · nothing stored

Art. 23 NIS2 · DVO (EU) 2024/2690 · § 32 BSIG

Assess significance and reporting stages, with calculation anchors and missing report information. For exercises and preparation.

for exercises · nothing stored

Art. 21 Abs. 2 lit. d, Abs. 3 NIS2 · DVO 2024/2690 Anhang Nr. 5

Turn exposure and dependency into a review depth, evidence requests and contract clauses.

9 inputs · nothing stored

Art. 21 Abs. 2 lit. a–j NIS2 · ISO/IEC 27001:2022 Anhang A

Find links between NIS2 measures, ISO 27001 and NIST, with suggested evidence. A mapping is not proof of compliance.

reference table

§ 30 Abs. 2 BSIG · Art. 21 Abs. 2 lit. a–j NIS2

Self-assessment under Section 30 (2) BSIG: an order of work with legal source, next step and expected evidence.

10 questions · PDF and CSV · nothing stored

Every verdict comes from an engine that cites the article it applied and is covered by automated tests. The same engines are built into the NIS2 platform.
Nothing you enter is stored. Statistics cookies are set only if you agree. The result of the scope check comes as a PDF note for your file.
Every result names the points that need human judgement — borderline figures, Member-State options, a 'not affected' verdict — instead of hiding them behind a green tick.

File the note – it records your result with its reasoning and source.