# Does NIS2 apply to mid-sized companies?

In general, NIS2 applies to entities in the sectors of its Annexes I and II that are at least medium-sized under Recommendation 2003/361/EC (50 or more employees, or an annual turnover and a balance sheet total both above EUR 10 million) and to some entities regardless of size. Your national authority or legal counsel can confirm whether your organisation is in scope.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/does-nis2-apply-to-mid-sized-companies

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Does NetSenX submit the NIS2 report for us?](https://netsenx.com/en/faq/does-netsenx-submit-the-nis2-report-for-us)
- [What are the NIS2 fines?](https://netsenx.com/en/faq/what-are-the-nis2-fines)
- [Who is responsible for NIS2 in a company?](https://netsenx.com/en/faq/who-is-responsible-for-nis2-in-a-company)
- [Is NIS2 mandatory for a company with fewer than 50 staff?](https://netsenx.com/en/faq/is-nis2-mandatory-for-companies-with-fewer-than-50-staff)
- [Can a small subsidiary be in NIS2 scope because of its group?](https://netsenx.com/en/faq/can-a-small-subsidiary-be-in-nis2-scope-because-of-its-group)