NIS2 in Greece: is your entity in scope? Find out in 3 minutes — free
Greece transposed NIS2 through Law 5160/2024, bringing ~2,000 entities under supervision by the National Cybersecurity Authority (NCA), with fines up to €10M or 2% of global turnover and personal liability for management. nis2ready.gr shows you where you stand under the Greek implementation — deadlines, registration duties, and gaps.
Free NIS2 Check →No credit card · Instant result · Not a substitute for legal advice
24 hours
to notify the NCA
€10M
max fine or 2% of turnover
Personal
liability for board members
~2,000
entities in scope in Greece
Who is in scope under Law 5160/2024
Size criterion: 50+ employees or €10M+ turnover in a covered sector.
Plus the category most companies miss: suppliers to NIS2 entities — the directive reaches you through the supply chain.
How it works
1. Check (3 min)
Answer a few questions and learn whether you qualify as an essential or important entity under Law 5160/2024, and what that means.
2. Gap (1 day)
See what you have, what's missing, and your most critical gaps — mapped against the 93 controls of ISO/IEC 27001:2022.
3. Ready (ongoing)
A structured plan with owners, deadlines, ready-made policies, and evidence in one place — audit-ready for the NCA or your certification body at any time.
For businesses
No CISO? No problem. Step-by-step guidance, bilingual deliverables (GR/EN), and a board-ready Management Summary that documents management oversight — exactly what NIS2 demands.
Start the Check →For consultants & IT firms
Manage every client from one dashboard, with white-label reports under your own brand. Built for the vCISO model. Your Greek subsidiary reports in Greek to the NCA — your headquarters reads in English.
Become a Partner →Built on ISO/IEC 27001:2022 (93 controls) · Aligned with Greek Law 5160/2024 and NCA requirements · Bilingual GR/EN deliverables
Free NIS2 Check
Leave your details and get instant access to the scoping check, together with the obligated-entity guide.
Frequently asked questions
How did Greece transpose NIS2?
Through Law 5160/2024, which designates the National Cybersecurity Authority (NCA) as the supervisory authority, defines essential and important entities, and sets out risk-management measures, incident-reporting duties, and fines.
Who is the Greek NIS2 supervisory authority?
The National Cybersecurity Authority (Εθνική Αρχή Κυβερνοασφάλειας — EAK/NCA). Obligated entities register with the NCA and report significant incidents to it.
What are the NIS2 reporting deadlines in Greece?
An early warning within 24 hours of becoming aware of a significant incident, a detailed notification within 72 hours, and a final report within one month. The platform includes an incident register with automated reminders.
Does my Greek subsidiary need to register with the NCA?
Entities in scope have a registration duty with the NCA; details and deadlines are specified in secondary regulation. The platform guides you through the process — with deliverables generated in both Greek and English from the same data.
What is the difference between essential and important entities?
Two tiers of obligated entities with different supervision intensity and fine ceilings. Classification depends on sector and size — the NIS2 Check gives you a first indicative assessment.
Is ISO 27001 mandatory for NIS2 compliance in Greece?
Not mandatory — but it is the safest route. The Article 21 measures map closely to the 93 controls of ISO/IEC 27001:2022, so one ISMS effort covers both. The platform performs this mapping automatically.
What fines apply under Law 5160/2024?
Up to €10M or 2% of global annual turnover for essential entities (€7M or 1.4% for important entities) — whichever is higher — plus personal liability for members of management.
Every month that passes is one month closer to your first audit. Run the Check today.
Free NIS2 Check →