About
About: NIS2 Guide
NIS2 Guide is an independent, provider-neutral reference on Directive (EU) 2022/2555: who publishes it, what it covers, its sources and how it earns.
Summary
nis2guide.net is an independent, provider-neutral reference on the NIS2 Directive, Directive (EU) 2022/2555, written by the NIS2 Guide Editorial Team for the organisations, managers and advisers who have to apply it.
Its readers include compliance managers, CISOs, management bodies, in-house counsel and the suppliers of in-scope entities; the law itself is explained on the NIS2 Directive overview.
Who Publishes nis2guide.net
nis2guide.net is published under its own name and written by the NIS2 Guide Editorial Team; no consultancy, software vendor or law firm owns, sponsors or edits it.
The team signs every page as a team. No page names an individual author or claims an outside reviewer. Questions about the publisher go to editorial@nis2guide.net.
What the Site Covers
nis2guide.net covers the NIS2 Directive, Implementing Regulation (EU) 2024/2690 for the 11 entity types listed in its Article 1, and the national laws that transpose the Directive, with one page for each of the 27 Member States and one each for the United Kingdom, Switzerland and Norway. The Implementing Regulation has been in force and directly applicable since 7 November 2024 (Article 16). All 18 sectors are covered, 11 in Annex I and 7 in Annex II, and DORA, ISO/IEC 27001, NIST CSF, IEC 62443, the GDPR, NIS1 and the CER Directive get one comparison page each. The 10 main sections are listed below.
- the Directive's full text and structure: articles, annexes, recitals
- who NIS2 applies to: sectors, size rules, the entity test
- all 18 NIS2 sectors: Annex I and Annex II entity types
- the 10 cybersecurity risk-management measures: Article 21(2)(a) to (j)
- NIS2 incident reporting: early warning, notification, final report
- NIS2 registration: who registers, what to submit
- NIS2 supervision and enforcement: audits, orders, fines
- NIS2 transposition tracker: national laws, authorities, dated status
- NIS2 and other laws and standards: one comparison per instrument
- NIS2 compliance requirements: what entities do, step by step
Where the Facts Come From
Every value on nis2guide.net comes from a primary source: EUR-Lex and the Official Journal for EU law, the national gazette or the competent authority for national law, and ENISA for ENISA guidance. Where a newer official source differs, the official value is written. The Commission's per-country NIS2 pages of July 2025 are never used for national status.
Every status carries its date, and every pending proposal carries its procedural position. As of 23 October 2026, the NIS2 amendment proposal COM(2026) 13 is "Awaiting committee decision" in the European Parliament, and Coreper agreed the Council mandate on the Digital Omnibus COM(2025) 837 on 21 October 2026; neither is adopted law. Each checking step is described under methodology and fact-checking.
How the Site Earns Its Income
nis2guide.net earns from provider match requests: a reader describes what they need, and we pass the request to independent NIS2 consultants, auditors, training providers, ISMS and GRC software vendors and managed security service providers.
No company pays for placement, and no provider is named or ranked in the content. The request form reads: "Describe what you need and we pass your request to independent NIS2 providers who work on this."
No advertising or analytics vendors run on the site. Form data is kept for 24 months and newsletter data until the reader unsubscribes; the privacy notice explains how request data is handled.
What the Site Does Not Do
nis2guide.net explains what NIS2 and the national laws require; it does not give legal advice and never tells a named organisation that it is or is not in scope.
Organisations are bound by their national law, not by the Directive, which is addressed to the Member States (Article 46); the national measures have applied since 18 October 2024 (Article 41(1)).
The scope check gives an indicative result with the legal basis for each answer; the NIS2 scope check asks about sector, size and location.
How to Report an Error or Ask a Question
Errors, outdated values and questions go to editorial@nis2guide.net, and every correction is checked against the primary source before it is made. Give the page URL and the source that shows the newer value, such as the EUR-Lex text, a gazette entry or an authority page.