NIS2 calculator — check whether the NCSA applies to you
The amended Polish National Cybersecurity Act enters into force on 3 April 2026 and the deadline for self-assessment and registration in the S46 system is 3 October 2026. Answer 3 questions to see whether your company is likely to be an essential or important entity.
In which sector does your company operate?
Sectors of high criticality (Annex I)
Other critical sectors (Annex II)
Not on the list
How the result is calculated
Methodology in brief
The calculator compares the sector of activity (Annexes I and II of the NIS2 directive) with company size (thresholds of 50 employees / EUR 10 M and 250 / EUR 50 M). Special situations — e.g. DNS, TLD, telecoms, public administration — automatically qualify the entity as essential regardless of size. The result is indicative and does not replace a formal qualification analysis.
From the blog
Expand your knowledge
Ransomware — how to protect your company effectively
What an attack looks like from the inside, five layers of protection, an incident response plan and the question nobody wants to ask: should you pay the ransom.
Read article CybersecurityPhishing at work — how to spot it and train the team
People are the weakest link. Teach them vigilance.
Read article CybersecurityNIS2 — obligations for companies in Poland
NIS2 is coming hard. Check whether it applies to you.
Read article