Many companies wait for "a letter from the state" before doing anything. The letter never comes. GEO 155/2024, which transposes the NIS2 Directive in Romania, works on self-identification: you are the one required to check whether you are in scope and to register with DNSC. The absence of a notification from the authorities is not an excuse — failing to register is a sanctionable breach in itself.
Being in scope is not only about company size. Your sector matters, but so do your clients: suppliers of essential entities can fall into scope through the supply chain. This means even small companies may be required to comply with NIS2.
We built a free tool that tells you in about 5 minutes whether you are in scope and what steps follow. The data you enter stays in your browser — it is not saved and not transmitted anywhere.
Sources
This article was generated with AI assistance.