Skip to main content
Interactive ToolsLast updated: May 2026

NIS2 & CER Compliance Tools

Free, interactive tools to assess your NIS2 and CER compliance. No account required, no data stored on our servers.

No registrationCompletely freeData stays in your browserEnglish & German
📊 Quick Test

Find out if your company is in scope

Does your organisation fall under Annex I (Essential) or Annex II (Important) entities?

Check NIS2 Scope →
Most popular

NIS2 Scope Checker

~60 sec

Answer 3 questions to find out if NIS2 applies to your organisation, and whether you are an Essential or Important Entity.

Check my scope →
Most thorough

Article 21 Gap Assessment

~15 min

Work through all 40+ controls across the 10 mandatory Article 21 measures. See your compliance score and prioritised gaps.

Start assessment →
For incident teams

Incident Report Builder

~10 min

Build a properly structured NIS2 incident notification: Early Warning (24h), Full Notification (72h), or Final Report (1 month).

Build report →
Dual-directive

NIS2 vs CER Classifier

~2 min

Select your sector to see exactly which directive applies: NIS2, CER, or both, with a breakdown of specific obligations.

Classify my sector →
Art. 21(2)(a)

Risk Register Builder

~10 min

Score your assets and threats by likelihood and impact. Generates a colour-coded risk register for your Article 21(2)(a) documentation.

Build register →
Art. 21(2)(b)

Incident Response Planner

~5 min

Define team roles and P1/P2/P3 severity criteria. Generates a print-ready IR quick reference card with NIS2 reporting triggers.

Build IR card →
Art. 21(2)(c)

BCP/DR Gap Checker

~10 min

Enter your systems with current RTO/RPO figures. Shows which systems meet Article 21(2)(c) targets and where gaps exist.

Check my DR gaps →
Art. 21(2)(d)

Supply Chain Classifier

~5 min

Classify suppliers as Tier 1/2/3 based on data access and disruption risk. Shows required questionnaires, contract clauses, and audit rights per tier.

Classify suppliers →

⚠️ Usage Note

These tools provide indicative guidance and do not replace professional legal or security advice. For a definitive compliance assessment, please consult a qualified professional or your national competent authority.