NIS2 coverage

NIS2 compliance guidance for every EU+EEA country.

Audit41 Readiness covers all 30 EU+EEA member states. Select your country for jurisdiction-specific requirements, deadlines, and what your organisation must do.

Phase 1 — Full guidance available

🇩🇰 Denmark

Center for Cybersikkerhed (CFCS)

Article 21 compliance deadline

NIS2-loven Article 21 risk management measures must be in place.

See Denmark guidance →

🇭🇺 Hungary

SZTFH (Supervisory Authority for Regulated Activities)

First audit deadline

First mandatory cybersecurity audit must be completed by June 30, 2026.

See Hungary guidance →

Phase 2 — Guidance available

🇧🇪 Belgium

Centre for Cybersecurity Belgium (CCB)

Conformity deadline

Essential entities must demonstrate conformity to CCB by April 18, 2026.

See Belgium guidance →

🇳🇱 Netherlands

NCSC-NL / RDI (Rijksinspectie Digitale Infrastructuur)

Full enforcement

The Cyberbeveiligingswet enters full force October 1, 2026. EU baseline obligations apply now.

See Netherlands guidance →

All 30 EU+EEA countries

🇦🇹 Austria🇧🇬 Bulgaria🇭🇷 Croatia🇨🇾 Cyprus🇨🇿 Czech Republic🇪🇪 Estonia🇫🇮 Finland🇫🇷 France🇩🇪 Germany🇬🇷 Greece🇮🇪 Ireland🇮🇹 Italy🇱🇻 Latvia🇱🇹 Lithuania🇱🇺 Luxembourg🇲🇹 Malta🇵🇱 Poland🇵🇹 Portugal🇷🇴 Romania🇸🇰 Slovakia🇸🇮 Slovenia🇪🇸 Spain🇸🇪 Sweden🇮🇸 Iceland🇱🇮 Liechtenstein🇳🇴 Norway

Country-specific guidance for all EU+EEA states is being finalised. The self-check already applies country-specific classification rules for all 30 countries.

Not sure which country applies to your organisation?

If you operate across multiple EU member states, start with the self-check — it handles multi-jurisdiction situations.

Start free self-check →