Applicability check
Does NIS2 apply to you?
Get clarity in 30 seconds.
Three questions about your sector and size. You get an initial assessment right away — no email, no obligation.
This assessment does not replace legal advice. The official BSI applicability check is authoritative. NIS2 obligations can also arise through the supply chain (Section 30 of the BSI Act, BSIG) if you supply affected companies.
The facts
Why every day counts now.
The act was promulgated on December 6, 2025 and has applied directly since then. There is no grace period for the technical and organizational measures.
The NIS2UmsuCG amends the German BSI Act (BSIG). Obligations under Section 30 BSIG apply from day one.
“Important” and “essential” entities in 18 sectors are affected.
Personal liability of management. Duty to undergo training and to approve and oversee the measures.
Early warning within 24h, incident notification within 72h, final report to the BSI after one month.
§30 BSIG
The 10 mandatory measures
you must implement.
NIS2 prescribes a minimum set of risk management measures. We support you with every single one — from analysis to proof of compliance.
Risk analysis
Policies for assessing risks to your IT and OT systems.
Incident handling
Processes for detecting, responding to and reporting security incidents.
Backup & recovery
Business continuity, emergency management and crisis management.
Supply chain security
Security in relationships with service providers and suppliers.
Secure acquisition
Security in the development, procurement and maintenance of systems.
Effectiveness assessment
Procedures for assessing risk management measures — e.g. pentests.
Cyber hygiene & training
Basic practices and awareness training for all employees.
Cryptography
Policies for encryption and the use of cryptography.
Access control
Human resources security, asset management and access policies.
Multi-factor authentication
MFA and secured communications as a mandatory standard.
Your path to compliance
How SinCera Tech
protects you.
From the first status check to ongoing monitoring — one end-to-end process instead of piecemeal work.
Applicability & gap analysis
We determine with legal certainty whether and how NIS2 affects you, and compare your current state against the 10 obligations.
- Scope & sector classification
- Gap assessment §30 BSIG
- Prioritized action plan
Building the ISMS & measures
We build the required security management system — pragmatic, aligned with ISO 27001, without excessive bureaucracy.
- Policies & processes
- MFA, backup, access policies
- Supply chain security
Proof: pentest & IR
The effectiveness assessment requires evidence. Our penetration tests and incident response readiness provide it.
- Penetration tests & vulnerability scans
- Incident response plan & reporting channels
- Security awareness training
ARGUS24 — continuously compliant
NIS2 is not a project but a state. ARGUS24 monitors continuously and keeps your compliance live.
- 24/7 vulnerability orchestration
- AD/identity posture & deception
- Audit-proof evidence at the push of a button
Initial consultation
Clarity in 30 minutes —
free of charge.
In the NIS2 consultation, we clarify whether NIS2 applies to you, your liability risk and the three most important next steps. No obligation, with a concrete roadmap.
↻ Response within 24h · GDPR-compliant · Made & hosted in NRW