Free NIS2 Self-Assessment
Is your company in scope of the EU NIS2 Directive? 12 questions, instant answer, no signup.
Check your status
What it covers
- Scope: Annex I (essential — energy, transport, banking, health, digital infrastructure, public administration) vs Annex II (important — postal services, waste, chemicals, food, manufacturing, digital providers) and the size thresholds (medium: 50+ employees or €10M+ turnover)
- Obligations: risk-management measures (Art. 21), 24-hour early warning / 72-hour notification / one-month report (Art. 23), and management-body accountability (Art. 20)
- Next steps: a concrete, prioritised list of what to do first if you are in scope — and what to watch if you are not
Honest limitation: NIS2 is implemented nationally with variations (registration duties, thresholds, deadlines). This screening uses the directive text as adopted; confirm against your national law.
In scope and need to act?
The free guide NIS2 for Small Agencies: What Changes explains the obligations in plain language. For a full offline checklist with templates, get the NIS2 for Small Agencies (free EPUB).
Or read the free comparison: Free NIS2 assessment tools compared · the NIS2 readiness guide
Also try: the free NIS2 Gap Assessment · NIS2 Incident Report Generator · Cookie Consent Checker · EAA accessibility scanner · Accessibility statement generator
This self-assessment is free. Your site's headers are not.
The questions above are yours to answer, and nobody can answer them for you. What a tool can do is look at the site itself: EUComply Pro reads the live response and checks the NIS2 and security basics — HSTS, CSP, X-Frame-Options, HTTPS enforcement, mixed content and form submission security — and puts them in the same report as 15 accessibility checks, 33 in all, as a PDF you can hand a client or an auditor.