Important and essential entities under NIS2
Are you an important entity?
Organisations in critical sectors (energy, transport, health, digital infrastructure, etc.) with 50–249 employees or EUR 10–50 million turnover.
Are you an essential entity?
Large organisations with ≥250 employees or ≥EUR 50 million turnover in critical sectors — or providers of certain digital services regardless of size.
Unsure whether you are covered? DocLex automatically assesses your entity classification based on the uploaded documents and identifies which category you belong to.
From documentation to NIS2 report — four steps
Upload your documentation and receive a structured compliance report within minutes.
Upload up to 5 files — security policies, risk assessments, incident procedures, system documentation, BCP/DR plans, etc. The more documentation you provide, the more precise the report. DocLex analyses all files together.
DocLex systematically reviews all 13 requirement areas in NIS2 §§ 4–7 and §§ 10–12 and identifies gaps in your documentation. Critical gaps (scope, registration, incident handling, management responsibility) are highlighted separately.
Based on the gap analysis, DocLex asks follow-up questions about requirement areas not covered by your documentation — e.g. incident SLAs, MFA exceptions or management approval procedures.
You receive a complete NIS2 compliance report with status for each requirement area, precise legal section references and concrete action points. The report is suitable as a basis for internal review and board presentation.
All 13 NIS2 requirement areas
Based on Danish Act No. 434 of 06/05/2025 and EU Implementing Regulation 2024/2690.
Scope assessment
§ 4–5 — Is the organisation subject to NIS2?
Registration obligation
§ 10 — Registration with competent authority
Risk management policy
§ 6 no. 1 — Risk management policy and procedures
Incident handling
§ 6 no. 2 + § 12 — 24h/72h/1-month reporting
Business continuity
§ 6 no. 3 — BCP, backup and disaster recovery
Supply chain security
§ 6 no. 4 — Supplier management and security agreements
System security
§ 6 no. 5 — Network and system security
Effectiveness measurement
§ 6 no. 6 — Audit, testing and security metrics
Cyber hygiene and training
§ 6 no. 7 — Awareness programmes and education
Cryptography
§ 6 no. 8 — Encryption and key management
Access control
§ 6 no. 9 — IAM and privileged accounts
MFA and secure communications
§ 6 no. 10 — Multi-factor authentication
Management responsibility
§ 7 — Board and management accountability
Ready to get started?
Upload your documents and receive a NIS2 compliance report within minutes.
Start analysis