SMAGLOWSKI CONSULTING · NIS2
Step 1 — preliminary classification
Does NIS2 / the Polish KSC act even apply to you?
Start with two questions. We'll give you a preliminary read on whether your company is in scope — then you'll go through the readiness checklist.
NIS2 is the EU cybersecurity directive (Network and Information Systems Directive 2). The Polish KSC act — National Cybersecurity System — is its national implementation.
Does the company have at least 50 employees OR annual turnover above EUR 10M?
The NIS2 'medium enterprise' threshold. Meeting either condition is enough.