# Can a small subsidiary be in NIS2 scope because of its group?

Yes, it can. NIS2 measures size with the EU definition of small and medium-sized enterprises (Commission Recommendation 2003/361/EC), under which the staff, turnover and balance sheet of partner and linked enterprises are generally added to the company's own figures. A 30-person subsidiary of a large group can therefore count as large and fall within scope if its activity is in a listed sector. National laws may soften this: Germany's section 28(4) of the BSIG, for example, does not add the group's figures if the company is independent of its partner or linked enterprises in how its IT systems are designed and run. Map each legal entity in the group, its sector and its group figures, check the national rules in each country where it operates, and record the result.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/can-a-small-subsidiary-be-in-nis2-scope-because-of-its-group

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Our customer is in NIS2 scope. Do we have to comply too?](https://netsenx.com/en/faq/our-customer-is-in-nis2-scope-do-we-have-to-comply)
- [What does NIS2 require from a mid-sized company in scope?](https://netsenx.com/en/faq/what-does-nis2-require-from-a-mid-sized-company)
- [What are the ten risk-management measures in NIS2 Article 21?](https://netsenx.com/en/faq/what-are-the-ten-nis2-article-21-measures)
- [What is the difference between essential and important entities under NIS2?](https://netsenx.com/en/faq/what-is-the-difference-between-essential-and-important-entities)
- [Which sectors does NIS2 cover?](https://netsenx.com/en/faq/which-sectors-does-nis2-cover)