PLEN
Book a meeting
Menu
Incident in progress?Call +48 699 587 010
  1. FortCyber
  2. NIS2
  3. Am I in scope?

Is your organisation subject to the KSC Act? A preliminary assessment against the criteria of the Act that implements NIS2. A few questions, no login. You’ll see your status and its basis straight away.

  • result with no email required
  • criteria from Art. 5 of the Act and the KSC FAQ
  • law as of 20.10.2026
  1. type of organisation: company, public office, public body, municipal company
  2. activity under Annexes 1 and 2 of the Act
  3. size, including linked enterprises
  4. entry in the register of essential and important entities
  5. what you already have, to identify the first step

The checklist organises the criteria from the Act. It is not legal advice and does not replace analysis in unusual situations.

Self-assessment checklist

Choose an answer to continue. You can go back to the previous question.

Question 1

What type of organisation are you?

How the checklist works

The questions follow the criteria in the Act. The result is preliminary because some situations require checking documents.

Criteria

  • Art. 5 of the KSC Act and Annexes 1 and 2 (Journal of Laws 2026, item 252)
  • size thresholds from Commission Regulation (EU) 651/2014
  • answers from the Ministry of Digital Affairs in theKSC FAQ, including on local government

What the checklist doesn’t settle

  • designation by decision of the authority regardless of thresholds (Art. 7l)
  • corporate groups with an independent information system (Art. 5(7))
  • exceptions for voivodeship units and ancillary activities

Your data

  • answers are not stored in a database; if you request the result, they reach you and our team by e-mail
  • you only give your email to get the full result and the PDF
  • we store only your email and the consent version

What next

Now you know whether you’re in scope. Next: the order of actions.

Guide: what I need to doSteps, deadlines and evidence for the auditor. We haven’t applied for registrationWhat to do after 3 October 2026. NIS2 and the KSC ActObligations, penalties and frequently asked questions. FortCyber packagesAudit, rollout and ongoing support.

Let’s discuss your result

At the meeting:

  • we’ll confirm your status based on your documents
  • we’ll work out what to do about registration and the S46 system
  • we’ll show you what needs to be done by 3 April 2027.

Incident in progress? Call +48 699 587 010

Full consent wording and data protection information

I consent to the processing of my personal data by iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37, for the purpose of responding to my enquiry and conducting further correspondence related to it.

I also confirm that I have been informed of my right to request from the controller access to my personal data and its rectification or erasure (“right to be forgotten”), restriction of processing and data portability, my right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – and my right to object to the processing of data for the direct marketing of iTrust sp. z o.o. products and services, in accordance with Art. 15.1 GDPR (2016/679).

The controller of the personal data provided in this form is iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37. To exercise data subject rights, contact iod@itrust.pl or write to the registered office address.

We’ll get back to you within one working day.