Wat is de NIS2?
The Network and Information Security directive, or NIS2 directive, is intended to improve the cybersecurity and resilience of essential and important services in EU member states. This directive is currently being transposed into national law and will enter into force sometime in 2025 and will apply to governments and at least 30,000 companies.
This page contains an overview of the Important entities as named in the NIS2. These are medium-sized organizations that are active in a sector from the table on the “Essential entities” page and medium-sized and large organizations that are active in a sector from the table below.
An organization is medium-sized based on the following criteria:
- 50 or more employees or;
- An annual turnover and balance sheet total of €10 million or more.
Sector | Subsector | Type of entity |
1. Postal and courier services |
| Postal service providers as defined in Article 2, point (1a), of Directive 97/67/EC, including providers of courier services |
2. Waste management |
| Undertakings carrying out waste management as defined in Article 3, point (9), of Directive 2008/98/EC of the European Parliament and of the Council (1), excluding undertakings for whom waste management is not their principal economic activity |
3. Manufacture, production and distribution of chemicals |
| Undertakings carrying out the manufacture of substances and the distribution of substances or mixtures, as referred to in Article 3, points (9) and (14), of Regulation (EC) No 1907/2006 of the European Parliament and of the Council (2) and undertakings carrying out the production of articles, as defined in Article 3, point (3), of that Regulation, from substances or mixtures |
4. Production, processing and distribution of food |
| Food businesses as defined in Article 3, point (2), of Regulation (EC) No 178/2002 of the European Parliament and of the Council (3) which are engaged in wholesale distribution and industrial production and processing |
5. Manufacturing | (a) Manufacture of medical devices and in vitro diagnostic medical devices | Entities manufacturing medical devices as defined in Article 2, point (1), of Regulation (EU) 2017/745 of the European Parliament and of the Council (4), and entities manufacturing in vitro diagnostic medical devices as defined in Article 2, point (2), of Regulation (EU) 2017/746 of the European Parliament and of the Council (5) with the exception of entities manufacturing medical devices referred to in Annex I, point 5, fifth indent, of this Directive |
(b) Manufacture of computer, electronic and optical products | Undertakings carrying out any of the economic activities referred to in section C division 26 of NACE Rev. 2 | |
(c) Manufacture of electrical equipment | Undertakings carrying out any of the economic activities referred to in section C division 27 of NACE Rev. 2 | |
(d) Manufacture of machinery and equipment n.e.c. | Undertakings carrying out any of the economic activities referred to in section C division 28 of NACE Rev. 2 | |
(e) Manufacture of motor vehicles, trailers and semi-trailers | Undertakings carrying out any of the economic activities referred to in section C division 29 of NACE Rev. 2 | |
(f) Manufacture of other transport equipment | Undertakings carrying out any of the economic activities referred to in section C division 30 of NACE Rev. 2 | |
6. Digital providers |
| — Providers of online marketplaces |
— Providers of online search engines | ||
— Providers of social networking services platforms | ||
7. Research |
| Research organisations |