NIS2 WSV Check
Could NIS2 apply to your business? Our self-check offers initial pointers and covers ten selected security topics; an individual assessment remains necessary.
What is NIS2 – and why now?
The European NIS2 directive obliges considerably more companies than before to take binding cybersecurity measures – from risk management and incident reporting duties through to the personal responsibility of company management. In Germany it is transposed into national law by the NIS2 implementation act.
Many companies are unsure: Am I affected? And how urgent is this for my business? That is exactly where our NIS2 self-check comes in: it gives you an initial, understandable assessment in a few minutes – as the basis for a deeper, individual evaluation.
NIS2-Selbstcheck
Zwei Schritte: Hinweise auf eine mögliche Betroffenheit und eine Selbsteinschätzung zu zehn Sicherheitsthemen.
This self-check is currently available in German only, because it relies on precise references to German law (NIS2UmsuCG, §30 BSIG). Please contact us for an English-language assessment.
How this assessment is calculated
What goes into the assessment
Step 1 – Are you affected? What matters is your sector (Annex I "highly critical" or Annex II), the size of your company, and the economic thresholds: €10 million of annual turnover or balance sheet total for the first tier, and €50 million of annual turnover or €43 million of balance sheet total for the second tier. On top of that come two special cases that apply regardless of size: operators of critical installations (KRITIS) as well as qualified trust service providers, TLD registries and DNS providers. From this follows the classification as an essential entity, an important entity, or not covered.
Step 2 – Maturity. Ten questions on selected topics from the measures under Article 21(2) NIS2 and §30 BSIG: risk management, incident handling, business continuity, supply chain, procurement and development, effectiveness reviews, cyber hygiene and training, cryptography, access control with MFA, and reporting processes. You answer each question with yes, partly or no; the areas are weighted differently.
How to read the result
The applicability check follows the size and sector criteria of the directive. It is an initial estimate, not the binding classification – which may differ in individual cases, for instance with affiliated companies or several lines of business.
For maturity, the list of the weakest areas at the end says more than the percentage: it is sorted by weight and therefore a workable order for your next steps. Even companies not covered by NIS2 will find a sensible list of priorities there – all the more so since security requirements are increasingly passed down through customer supply chains.
The limits of this estimate
The check provides initial orientation and does not replace legal advice. Whether and how NIS2 applies to your company depends on details a self-check cannot capture. The binding classification and registration with the BSI require an individual assessment.
What happens to your input
Sector, size and answers never leave your device: the evaluation runs entirely on the client, nothing is transmitted to us and nothing is stored. How we handle data you actively send us via the contact form is described in our privacy policy.
Building blocks for the NIS2 measures
Emergency planning, access protection, backup and training are not a NIS2 invention – these are the products we implement them with.
Anti-Spam
Our intelligent anti-spam solution reliably protects your mailboxes from spam and phishing.
from €3.00/month per mailboxAll prices net plus statutory VAT.
Discuss your security needs: Anti-SpamAnti-Virus
Our secure anti-virus solution protects your systems from malware and ransomware.
from €7.49/month per deviceAll prices net plus statutory VAT.
Discuss your security needs: Anti-VirusIT Emergency Plan
Our disaster recovery plan for emergencies – created by an IT specialist.
from €59.00/monthAll prices net plus statutory VAT.
Discuss your security needs: IT Emergency PlanIT Security Check
Our security check with IT security experts – clear results and recommendations.
from €449.00 one-timeAll prices net plus statutory VAT.
Start the analysis: IT Security CheckManaged Firewall
Our secure Managed Firewall – operated and monitored by WSV.
from €99.00/monthAll prices net plus statutory VAT.
Discuss your security needs: Managed FirewallManaged Password
Our secure password manager database for your team.
from €8.00/month per userAll prices net plus statutory VAT.
Discuss your security needs: Managed PasswordMobile Device Management
Mobile Device Management (MDM) for the secure management of your mobile devices.
from €99.00/monthAll prices net plus statutory VAT.
Discuss your security needs: Mobile Device ManagementOnline backup for your business servers
Back up agreed server data away from your server room: automatically, encrypted and monitored. We clarify the scope and recovery with you.
from €110.00/month per server, incl. 1 TBAdditional storage: from €7.00 per 100 GB/month. All prices net plus statutory VAT.
Discuss backup and recovery: Online backup for your business serversManaged EDR/XDR with ESET
The next step beyond classic antivirus: detecting suspicious behavior before damage occurs.
on request per deviceAll prices net plus statutory VAT.
Discuss your security needs: Managed EDR/XDR with ESETQuestions about the NIS2 self-check
Who in Limburg-Weilburg or Rhine-Main may be covered by NIS2?
The region does not determine applicability. Sector, company size and special rules are relevant. The NIS2 self-check offers initial pointers; an individual legal assessment is needed for a binding classification.
Does the NIS2 self-check cover every legal requirement?
No. It asks about ten selected security topics and cannot capture every obligation or special case. Bring the result to an individual consultation.
Is the self-check result sent to WSV?
No. The assessment runs in your browser; the answers are not sent to WSV. Information you deliberately enter into the contact form is handled under our privacy notice.
From an initial estimate to a binding classification
The self-check gives you orientation, it does not decide. Simply bring your result to the conversation: we assess your applicability individually and work through the weakest measure areas with you, one by one.