What the NIS2 Coverage Check evaluates
The NIS2 Coverage Check evaluates, per § 28 BSIG (NIS2UmsuCG 2026), the sectors, size thresholds, and criticality of your organization. You learn whether you are an essential or important entity and which reporting obligations apply.
Legal foundations
NIS2UmsuCG 2026 (in force); BSIG § 28 (coverage, 18 sectors, size thresholds); EU Directive 2022/2555. Placeholder — Phase 46 provides the editable ContentBlock.
How the check works
1. Choose your sector (18 NIS2 sectors) 2. Provide staff count and annual revenue 3. Answer eight questions on criticality (core activity, infrastructure, services) 4. Clear coverage verdict plus reporting duties
Your benefits
• Free and without registration • NIS2UmsuCG status April 2026 • 50-staff threshold and sectors clearly evaluated • Guidance on BSI registration
Frequently asked questions
- Am I covered by NIS2?
- It depends on the sector (18 sectors in § 28 BSIG), staff count (at least 50 employees or EUR 10M revenue), and the criticality of your activity. The check works through these criteria systematically.
- What distinguishes essential from important entities?
- Essential entities (Annex I) face stricter supervisory and fine regimes than important entities (Annex II). The difference lies primarily in sector and size.
- What reporting duties exist?
- Affected entities are subject to a BSI registration obligation and a tiered incident reporting obligation under § 32 BSIG: initial notification within 24 hours, follow-up assessment 72 hours, final report one month.
This initial assessment is not legal advice and does not replace consultation with a qualified lawyer. Legal status: April 2026.