AnnexOps

NIS2 Exposure Analyzer

The NIS2 Directive (EU) 2022/2555 sets cybersecurity risk-management and incident-reporting duties for essential and important entities across 18 sectors. Find out where you likely stand, the duties and fines that follow, and your readiness gaps. This is an indicative self-assessment under the EU baseline, not legal advice. National law can extend scope.

Uses the EU baseline rules (version EU baseline — Directive (EU) 2022/2555 (v4: establishment and size history, review EU-REVIEW-2026-10-09)). NIS2 is a directive — your Member State’s law can extend scope and add duties.

Free · no login~4 minutesCites real Articles & Annexes