NIS2 check · 2 minutes

Does NIS2 apply to your business in Poland?

Four questions to estimate whether Poland's National Cybersecurity System Act (KSC), which transposes NIS2, covers your organisation and in which category. You'll then see what it means and what to do next.

1 Which sector does your organisation operate in?

Think of your main activity in Poland. Annexes 1 and 2 of the KSC Act list specific types of entity, so not every company in a sector is covered. Digital infrastructure includes cloud, data centres and CDNs; ICT service management covers managed service providers (MSPs) and managed security service providers (MSSPs).

2 How large is your company?

Include partner and linked enterprises in your group, in line with the EU definition (Regulation 651/2014).

3 Do you provide any of these services or have any of these statuses?

The KSC Act applies its own size rules here. DNS service providers, top-level domain name registries, domain name registration service providers and qualified trust service providers are essential entities regardless of size.

4 Do your clients ask you to meet cybersecurity requirements?

For example, security questionnaires, contract clauses or evidence of controls. Entities in scope must manage the risk in their supply chain.

Find out today whether NIS2 applies to you and how far you have to go

In 30 minutes, we review your activity, your registration status and your current controls. You leave with a clear view of your starting point.

Check for free whether NIS2 applies to you