Contact: NIS2 Guide

Each request has its own section below, followed by four things the site cannot do.

nis2guide.net is an independent, provider-neutral reference on Directive (EU) 2022/2555 of 14 December 2022 and the national laws that transpose it; the law itself is explained in our guide to the NIS2 Directive.

How to Reach the Editorial Team

Write to editorial@nis2guide.net; the address reaches the NIS2 Guide Editorial Team, which writes and checks every page of the site. One address, editorial@nis2guide.net, serves corrections, page questions and provider requests.

A question about a page is easiest to answer when it names the page and the sentence concerned. A question about your own organisation's case falls outside the service, as the limits section below explains.

Report an Error or Request a Correction

If a page states a value, a date or an article reference that you believe is wrong, email the editorial team with the page and the primary source that shows the correct value. How corrections are handled is set out in our editorial policy.

A correction request contains the three items listed below.

• The page URL.
• The exact statement you believe is wrong, quoted as it appears.
• The primary source: EUR-Lex for EU law, the national gazette or the competent authority for national law.

We check the claim against the primary source and correct the page when the source confirms it. A newer official source takes precedence over the value a page states.

Pass a Request to Independent Providers

Describe what you need and we pass your request to independent NIS2 providers who work on this. These are consultants, auditors, training providers, ISMS and GRC software vendors and managed security service providers (MSSPs). No official approval or list of NIS2 software, consultants or courses exists, in line with the technology neutrality of Article 25(1) of the Directive.

Outside help does not move the legal duty: the management body approves and oversees the Article 21 measures and can be held liable for infringements (Article 20(1)). What a programme involves is set out under NIS2 compliance.

What We Cannot Do for You

We explain what NIS2 and the national laws require, but we cannot give legal advice, decide whether a named organisation is in scope or receive incident reports. The four limits are listed below.

1. No legal advice: the pages explain the law; they do not assess your contracts, measures or liability.
2. No scope decision for a named organisation: the Directive is addressed to the Member States (Article 46), so an organisation is bound by its national law, listed per country in the NIS2 transposition tracker. The scope check gives an indicative result with the legal basis for each answer: check whether NIS2 applies.
3. No incident reports: a significant incident goes to the entity's CSIRT or, where applicable, its competent authority (Article 23(1)), never to this site. The early warning is due within 24 hours of becoming aware of the incident (Article 23(4)(a)); see NIS2 authorities for the national recipients.
4. No provider recommendation: we never name, rank or recommend a provider, also not in reply to a request.

How This Site Works

Who publishes the site, how its values are checked, how it stays independent and what happens to your data are each set out on their own page. The four trust pages are listed below.

• about NIS2 Guide: who publishes nis2guide.net.
• methodology and fact-checking: how values are checked against primary sources.
• editorial policy: independence and the provider match.
• privacy: how request data is handled; form data is kept for 24 months.