NIS2: affected companies
Find the companies NIS2 likely applies to and who owns IT security there.
Preview
Example data| Companies | Sector | Employee range | Likely in scope | ISO 27001 | Security lead |
|---|---|---|---|---|---|
| Stromkraft Nord | Energy | 250+ | Yes | Yes | A. Beispiel |
| Hafenblick Logistik | Transport | 50-249 | Yes | No | – |
| Datenschmiede Cloud | ICT services (B2B) | 50-249 | Yes | Yes | B. Beispiel |
| Kaffeeliebe | Not covered | Under 50 | No | No | – |
Columns in this template
Each column is a research question. Compelling answers it for every row and shows the source next to the answer.
- SectorWhich sector does this company operate in? Choose one: Energy, Transport, Banking and finance, Health, Water, Digital infrastructure, ICT services (B2B), Public administration, Postal and courier, Waste management, Chemicals, Food, Manufacturing, Digital providers, Research or Not covered.Single choice
- Employee rangeHow many employees does this company have? Choose one: Under 50, 50-249 or 250+.Single choice
- Likely in scopeDoes this company operate in a NIS2-covered sector and have at least 50 employees or more than EUR 10 million turnover?Yes / No
- ISO 27001Is this company ISO 27001 certified?Yes / No
- Security leadWho is the published head of IT security or CISO of this company?Text
When to use it
Sell security services
A security consultancy or SOC provider finds companies that likely fall under NIS2 and have no named security lead yet.
Target certification projects
Companies in scope without ISO 27001 are candidates for audit and compliance support.
Reach the right person
The published security lead is the contact for tooling, audits and awareness training.
FAQs
Where does the data come from?
From company websites, public registers, certification directories and announcements. Compelling shows the source with each answer.
Is this legal advice?
No. The columns show indicators from public sources. Whether NIS2 applies to a company is for that company's own review.
Why does the column say likely in scope?
NIS2 applies by sector and size. The template checks both from public data, so the result is an indicator that you can check with the company.
More templates for Regulation
All templates →Accessibility Act: affected companies
Find online sellers the BFSG likely affects and check who publishes accessibility information.Companies4 columnsE-invoicing mandate: affected companies
Find companies the German e-invoicing mandate likely affects and which ERP they run.Companies4 columnsWhistleblower channel check (HinSchG)
Check which companies publish an internal reporting channel and who still has none.Companies4 columns