← All Tools

NIS2 Self-Assessment

Self-assess NIS2 scope, Article 21 risk-management measures, Article 20 governance and the Article 23 reporting timeline — against Directive (EU) 2022/2555.

Preparation aid, not legal advice and not an official determination of whether your entity is in scope. NIS2 is a Directive transposed by each Member State; national law may add requirements and the competent authority decides scope (in Luxembourg: ILR). Verify every obligation against your national transposition. Source: Directive (EU) 2022/2555 (EUR-Lex ELI).
100% client-side. No network requests. Nothing is stored until you tick “Keep my progress in this browser”; the encrypted export carries it to another machine.

Am I in scope? — Art. 2 / 3

A provisional read from your sector and size. It is an aid, not a determination.

“Regardless of size” categories (Art. 2(2) / 3(1))

Posture

Incident reporting timeline — Art. 23(4)

Enter when the entity became aware of a significant incident; the statutory deadlines are computed from the Directive.

Cross-link with the DORA Compliance Checker and Compliance Reference Database.

🍜 From the same menu
📜
Policy Document Generator
Generate eight security policy documents (Information Security, Acceptable Use, Access Control, Incident Response, Third-Party, Data Classification, Business Continuity, Password & Authentication) from one tagged clause library, aligned to ISO 27001, NIS2, DORA, GDPR, PCI DSS. Markdown, wiki text, print. Client-side
📒
DORA Register of Information Builder
Compile the mandatory DORA ICT third-party register across all template tables, with completeness checks and CSV/JSON/Markdown export
👥
RACI Matrix Builder
Build a RACI / RASCI responsibility-assignment matrix: map tasks to roles, auto-validate the one-Accountable rule, missing Responsible, accountability overload and orphan rows/columns, then export Markdown / CSV / JSON (with JSON re-import). Client-side