NIS2 compliance
for the EU
NIS2 is the EU's updated cybersecurity directive, significantly expanding which organisations must implement security measures. Each member state is transposing it into national law — the Netherlands via the Cyberbeveiligingswet (Cbw), targeting 1 July 2026.
Use these free tools to understand whether NIS2 applies to your organisation, assess your current compliance, and see exactly what you need to do.
Agenzia per la Cybersicurezza Nazionale (ACN)
Essential: €10M or 2% global turnover
Important: €7M or 1.4% global turnover
Transposed on time. Phased enforcement: risk management obligations apply 18 months after ACN notification. Full compliance expected Oct 2026.
Available tools
Check if NIS2 applies to you
2 minAnswer a few questions about your sector and company size to see if your organisation falls under the NIS2 directive.
Assess your compliance
5–20 minQuick check (5 min) or full assessment (20 min) across all 10 NIS2 Article 21 security control areas. Get a scored report.
Read the NIS2 guide
ReferencePractical guide to the 10 NIS2 security requirements with recommended actions, priority levels, and country-specific regulatory context.
No login required. Your data stays in your browser until you choose to save.