Diagnostic tool

NIS2 self-assessment

Eight questions to see whether — and how — the NIS2 Directive reaches your company, and where to focus first.

~3 minutes · 8 questions Runs in your browser · nothing is sent

Who it’s for

Who it’s for

Boards, leadership, IT/security leads and firms that need a quick read on where they stand against NIS2 — before committing time or budget.

How it works

Answer eight questions. The result is computed entirely in your browser: no answers are sent or stored. You can retake it any time.

What it can indicate

  • Whether you are likely in scope, and as what (essential or important entity).
  • Where your gaps concentrate today against the core obligations.
  • A prioritised view of what to address first.

What it cannot do

  • It is not a formal scope determination: that depends on national transposition and, in Italy, on the ACN.
  • It is not legal advice or a compliance judgement.
  • It does not replace a thorough assessment of your context.

The eight questions

Answer for your situation today. If you are unsure, choose “Not sure” — that is useful information too.

Scope

1Which area does your business mainly fall under?

2Does your company have at least 50 employees, or annual turnover/balance sheet above €10 million?

3Do you provide services or operate in the European Union?

4Do you fall into a category in scope regardless of size (e.g. public electronic-communication networks/services, trust-service providers, domain-name registries/DNS, central public administration)?

Readiness

5Do you have documented, leadership-approved cyber risk management?

6Can you report a significant incident within the deadlines (24h early warning, 72h notification)?

7Does the management body oversee and answer for cyber risk?

8Do you manage supply-chain risk (critical ICT suppliers and services)?

Didn’t finish the test?

Speak to the advisor directly.

A confidential 30-minute briefing to understand where you stand against NIS2 and set the next steps.

Book a consultation

The directive is (EU) 2022/2555. In Italy the point of contact is the ACN.