NIS2 · pillar 1 of 6
Scope — who is covered
Sector plus size decides whether you are in, and whether you are essential or important.
- 1 Essential and important entities Everyone in scope carries the same obligations. The split into essential and important entities changes only how you…
- 2 Annex I and Annex II: which sectors Two lists. Annex I holds the sectors of high criticality — energy, transport, banking, financial market infrastructure…
- 3 The size cap, and who is caught anyway Scope is sector and size. In general an entity is caught once it is at least medium-sized — 50 staff, or €10 million in…
Start this pillar See the whole map
Sources: Directive (EU) 2022/2555 (NIS2), Belgian law of 26 April 2024 establishing a framework for the cybersecurity of networks and information systems, Centre for Cybersecurity Belgium — NIS2 and CyberFundamentals. Written from those texts and last checked on against reporting on them — not read line by line against the primary documents. Every card names the clause it comes from precisely so you can settle it at the source, and [email protected] is where a correction goes.