# Is NIS2 mandatory for a company with fewer than 50 staff?

Usually not directly, but there are exceptions, and it can reach you through your customers. NIS2 generally applies to entities in its listed sectors that are at least medium-sized under the EU definition, which in broad terms means 50 or more employees, or annual turnover and balance sheet both above EUR 10 million. Article 2(2) brings in some entities regardless of size, such as providers of public electronic communications, trust service providers, top-level domain registries and DNS service providers, and those a Member State identifies as critical. Check also whether your group counts as one enterprise, because partner and linked companies' figures can be added. Even when you are out of scope, customers in scope must manage supplier risk under Article 21, so expect questionnaires. Your national law and authority have the final word.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/is-nis2-mandatory-for-companies-with-fewer-than-50-staff

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Can a small subsidiary be in NIS2 scope because of its group?](https://netsenx.com/en/faq/can-a-small-subsidiary-be-in-nis2-scope-because-of-its-group)
- [Our customer is in NIS2 scope. Do we have to comply too?](https://netsenx.com/en/faq/our-customer-is-in-nis2-scope-do-we-have-to-comply)
- [What does NIS2 require from a mid-sized company in scope?](https://netsenx.com/en/faq/what-does-nis2-require-from-a-mid-sized-company)
- [What are the ten risk-management measures in NIS2 Article 21?](https://netsenx.com/en/faq/what-are-the-ten-nis2-article-21-measures)
- [What is the difference between essential and important entities under NIS2?](https://netsenx.com/en/faq/what-is-the-difference-between-essential-and-important-entities)