NIS2 compliance
for the EU
NIS2 is the EU's updated cybersecurity directive, significantly expanding which organisations must implement security measures. Each member state is transposing it into national law — the Netherlands via the Cyberbeveiligingswet (Cbw), targeting 1 July 2026.
Use these free tools to understand whether NIS2 applies to your organisation, assess your current compliance, and see exactly what you need to do.
Bundesamt für Sicherheit in der Informationstechnik (BSI)
Essential: €10M or 2% global turnover
Important: €7M or 1.4% global turnover
NIS2UmsG entered into force Dec 6, 2025. ~29,500 companies in scope. Entities must register with BSI by March 6, 2026.
Available tools
Check if NIS2 applies to you
2 minAnswer a few questions about your sector and company size to see if your organisation falls under the NIS2 directive.
Assess your compliance
5–20 minQuick check (5 min) or full assessment (20 min) across all 10 NIS2 Article 21 security control areas. Get a scored report.
Read the NIS2 guide
ReferencePractical guide to the 10 NIS2 security requirements with recommended actions, priority levels, and country-specific regulatory context.
No login required. Your data stays in your browser until you choose to save.