27 Member States · data 2026-07-16
National transposition
NIS2 transposition status, competent authorities and CSIRTs across all 27 EU Member States. Status counts mirror countries.json.
19
Transposed, in force
2
Transposed, entry pending
1
Transposed, commencement pending
5
In legislative procedure
- Transposed, in force
- Transposed, entry pending
- Transposed, commencement pending
- In legislative procedure
Coastlines: Natural Earth (public domain). Colours from this site’s NIS2 status data.
| Country | NIS2 status | Competent authority | CSIRT |
|---|---|---|---|
| Austria AT | Transposed, entry pending | Bundesministerium für Inneres (BMI) | CERT.at / GovCERT Austria |
| Belgium BE | Transposed, in force | Centre for Cybersecurity Belgium (CCB) | CERT.be (within CCB) |
| Bulgaria BG | Transposed, in force | National Cybersecurity Coordinator | National CSIRT (CERT Bulgaria) |
| Croatia HR | Transposed, in force | Nacionalni centar za kibernetičku sigurnost (NCSC-HR), within SOA | CERT (CARNET) / NCSC-HR |
| Cyprus CY | Transposed, in force | Digital Security Authority (DSA) | CSIRT-CY |
| Czech Republic CZ | Transposed, in force | Národní úřad pro kybernetickou a informační bezpečnost (NÚKIB) | GovCERT.CZ (NÚKIB) / CSIRT.CZ |
| Denmark DK | Transposed, in force | Center for Cybersikkerhed (CFCS), under Forsvarets Efterretningstjeneste, + sectoral authorities | CFCS / DKCERT |
| Estonia EE | Transposed, in force | Riigi Infosüsteemi Amet (RIA) | CERT-EE (within RIA) |
| Finland FI | Transposed, in force | Decentralised: sector-specific supervisory authorities; Traficom hosts the National Cyber Security Centre as single point of contact | NCSC-FI (Traficom) |
| France FR | In legislative procedure | Agence nationale de la sécurité des systèmes d'information (ANSSI) | CERT-FR (ANSSI) |
| Germany DE | Transposed, in force | Bundesamt für Sicherheit in der Informationstechnik (BSI) | CERT-Bund (BSI) |
| Greece GR | Transposed, in force | National Cybersecurity Authority (NCSA), est. by Law 5086/2024, under the Minister of Digital Governance | National CSIRT |
| Hungary HU | Transposed, in force | Szabályozott Tevékenységek Felügyeleti Hatósága (SZTFH) | National CSIRT |
| Ireland IE | In legislative procedure | National Cyber Security Centre (NCSC), with sectoral regulators incl. ComReg (per draft) | CSIRT-IE (NCSC) |
| Italy IT | Transposed, in force | Agenzia per la Cybersicurezza Nazionale (ACN), with sector-specific authorities | CSIRT Italia (ACN) |
| Latvia LV | Transposed, in force | National Cyber Security Centre (at the Ministry of Defence) | CERT.LV |
| Lithuania LT | Transposed, in force | Nacionalinis kibernetinio saugumo centras (NKSC), under the Ministry of National Defence | NKSC / CERT-LT |
| Luxembourg LU | In legislative procedure | Institut Luxembourgeois de Régulation (ILR) (per bill) | CIRCL / GOVCERT.LU |
| Malta MT | Transposed, commencement pending | Critical Infrastructure Protection (CIP) Department, Ministry for Home Affairs | CSIRTMalta |
| Netherlands NL | In legislative procedure | Nationaal Cyber Security Centrum (NCSC), under the Ministry of Justice and Security, + sectoral regulators | NCSC-NL |
| Poland PL | Transposed, in force | Minister of Digital Affairs; CSIRTs operate the system | CSIRT NASK, CSIRT GOV, CSIRT MON |
| Portugal PT | Transposed, entry pending | Centro Nacional de Cibersegurança (CNCS) | CERT.PT (CNCS) |
| Romania RO | Transposed, in force | Directoratul Național de Securitate Cibernetică (DNSC) | DNSC / CERT-RO |
| Slovakia SK | Transposed, in force | Národný bezpečnostný úrad (NBÚ) | SK-CERT (NBÚ) |
| Slovenia SI | Transposed, in force | Urad Vlade RS za informacijsko varnost (URSIV) | SI-CERT |
| Spain ES | In legislative procedure | New Centro Nacional de Ciberseguridad (CNC) (per draft); existing CCN-CERT, INCIBE-CERT, ESPDEF-CERT continue sectoral roles | CCN-CERT / INCIBE-CERT |
| Sweden SE | Transposed, in force | Decentralised: sector-specific supervisory authorities (e.g. PTS for telecoms); MSB as coordinator | CERT-SE (MSB) |