📍 Europe · NIS2 Directive (EU) 2022/2555 🇮🇹 Italian Version
🏢 Sectors

NIS2 Sectors and Entities

The full list of highly critical and critical sectors, with the categories of entities subject to the Directive.

📊 Inclusion Criteria

✅ INCLUDED (Default)

< 250
employees
≤ €50M
turnover OR
≤ €43M
balance sheet total

🚫 EXEMPT (Default)

< 10
employees
< €2M
turnover

⚠️ BELOW THRESHOLD (If designated)

1
sole national provider
Designated by the Member State
🔴

Essential Entities

Annex I

Medium to large entities operating in highly critical sectors.

⚡ Energy

  • Electricity undertakings (generation, distribution, transmission)
  • Distribution system operators (DSO)
  • Transmission system operators (TSO)
  • Electricity market operators
  • EV charging point operators

Also included:

  • District heating and cooling
  • Oil (pipelines, refining)
  • Gas (suppliers, storage, LNG)
  • Hydrogen

✈️ Transport

  • Commercial air carriers
  • Airport managing bodies
  • Air traffic control operators

Also included:

  • Railway (infrastructure managers, undertakings)
  • Maritime (transport, ports, VTS)
  • Road (traffic management, ITS)

🏦 Banking and Credit

  • Credit institutions
  • (As defined in Reg. EU 575/2013)

📈 Financial Market Infrastructures

  • Trading venue operators
  • Central counterparties (CCP)
  • Other financial market operators

🏥 Healthcare

  • Healthcare providers
  • EU reference laboratories
  • Medicinal product R&D entities
  • Critical medicinal product and medical device manufacturers
  • Healthcare facilities

💧 Water

  • Drinking water suppliers
  • Drinking water distributors
  • Wastewater undertakings (collection, disposal, treatment)

🌐 Digital Infrastructure

  • Internet exchange point (IXP) providers
  • DNS service providers
  • TLD name registries (.it, .com)
  • Cloud computing service providers
  • Data centre service providers
  • Content delivery network (CDN) providers
  • Trust service providers (eIDAS)
  • Electronic communications network providers

💻 ICT Service Management (B2B)

  • Managed service providers (MSP)
  • Managed security service providers (MSSP)

🏛️ Public Administration

  • Central government entities
  • Regional government entities
  • (As defined by Member States)

🛸 Space

  • Space infrastructure operators
🟡

Important Entities

Annex II

Entities in critical sectors with somewhat lighter requirements.

📬 Postal and Courier Services

  • Postal service providers
  • Courier and express service providers

♻️ Waste Management

  • Waste management undertakings
  • (Excluding companies for which waste management is not the main activity)

🧪 Chemicals

  • Companies manufacturing or distributing substances (REACH Reg.)
  • Producers of articles containing substances or mixtures

🍔 Food Production and Distribution

  • Food businesses (Reg. EC 178/2002)
  • Wholesale distribution and industrial food production

🏭 Manufacturing

  • Medical devices (Reg. EU 2017/745)
  • In vitro diagnostic medical devices (Reg. EU 2017/746)
  • Computers, electronics, and optical products (NACE C26)
  • Electrical equipment (NACE C27)
  • Machinery and equipment (NACE C28)
  • Motor vehicles (NACE C29)
  • Other transport equipment (NACE C30)