NIS2 check: is the company in scope?

NIS2 applicability check: estimate in one minute whether a company falls under NIS2 as an important or essential entity. Non-binding, nothing is stored.

Activity

Sector

Employees

Annual turnover (€ million)

Balance sheet total (€ million)

Special cases

Operator of a critical facility (KRITIS) Qualified trust service provider, TLD registry or DNS service provider Provider of public electronic communications networks or services

If the company belongs to a group, employees and turnover of partner and linked enterprises are usually included.

No data is stored or transmitted. The evaluation runs entirely in the browser. Non-binding initial assessment, not legal advice – binding is a case-by-case review, e.g. using the BSI applicability check.

Background

What NIS2 means.

With the EU NIS2 directive, cyber security obligations have applied to far more companies in Germany since December 2025 – depending on sector and size. Entities in scope must register with the BSI, practise risk management and report security incidents; management is liable.

In scope – what now?

fontax supports the technical implementation: assessment, action plan, multi-factor authentication, backup, emergency planning and evidence.

Get in touch