iso27diy-corp/Corpus/Standards/NIS 2 Cbw/NIS 2 Scope.md

1.6 KiB

Here is the full list, split by annex.

Annex I — Sectors of High Criticality (Essential Entities)

  1. Energy — electricity, oil, gas, hydrogen, district heating and cooling
  2. Transport — air, rail, water, road
  3. Banking — credit institutions
  4. Financial market infrastructures — trading venues, central counterparties
  5. Health — hospitals, reference laboratories, manufacturers of critical medical devices, pharmaceutical manufacturers
  6. Drinking water — suppliers and distributors
  7. Wastewater — collection, treatment, disposal
  8. Digital infrastructure — internet exchange points, DNS providers, TLD registries, cloud computing, data centres, content delivery networks, trust service providers, electronic communications networks
  9. ICT service management (B2B) — managed service providers, managed security service providers
  10. Public administration — central and regional government bodies
  11. Space — operators of ground-based infrastructure

Annex II — Other Critical Sectors (Important Entities)

  1. Postal and courier services
  2. Waste management
  3. Chemicals — manufacture, production, distribution
  4. Food — wholesale distribution, industrial production and processing
  5. Manufacturing — medical devices, computers and electronics, electrical equipment, machinery, motor vehicles, other transport equipment
  6. Digital providers — online marketplaces, online search engines, social networking platforms
  7. Research organisations

Regardless of size — always in scope

DNS providers, TLD registries, trust service providers, and public electronic communications providers fall under the directive irrespective of their size.