Free tool

Does NIS2 Apply to Our Business?

Answer a few questions and find out whether the EU NIS2 cybersecurity rules are likely to cover your Irish business, and what that would mean.

Your main business activity

Number of employees

Annual turnover or balance sheet total

Do you supply, support or manage IT for larger organisations in these sectors?

Do any of these apply? (these can bring you in scope whatever your size) We provide public electronic communications networks or services (telecoms, broadband) We provide DNS services, run a top-level domain registry, or provide domain name registration We are a qualified trust service provider (qualified e-signatures, seals, timestamps) We are the only provider in Ireland of a service essential to society or the economy

General information, not legal advice. This applies the scope rules in the EU NIS2 Directive. Ireland has not yet fully enacted its national NIS2 law (the National Cyber Security Bill was still going through the legislative process in late 2026), and the final Irish rules may differ in detail, so check ncsc.gov.ie and take legal advice before relying on the result. Size is judged on the whole group of linked or partner enterprises, so a small subsidiary of a large group can still be in scope. Nothing you select is sent to Netoja.

Services

Company

Legal