NIS2 check | Are you in scope of the Cybersecurity Act? | Newblend
Newblend Book an introduction
Check

NIS2 check

Seven questions about your sector, size, supply chain and current measures. You see immediately whether the Cybersecurity Act applies to you, and which measures need attention first.

In short
  • Seven questions, two minutes. No obligations.
  • Outcome: does the law apply to you directly, indirectly through your customers, or not at all.
  • Plus an overview of the duty-of-care measures you are still missing.
  • The Dutch Cybersecurity Act takes effect on 15 August 2026.
Last updated: 5 August 2026
The questions

What the check looks at

  • Which sector your organisation operates in.
  • How many staff and what turnover.
  • Whether you supply organisations that are in scope themselves.
  • Whether multi-factor authentication is on all accounts.
  • Whether restores from backup are actually tested.
  • Whether there is an incident process with roles and contacts.
  • Whether staff receive periodic awareness training.
Working form to follow

[PLACEHOLDER: interactive check. The questions and the decision logic are in place; the working version will be connected to the form and mail handling you supply.]

Possible outcomes

What the result means

Table. Outcomes of the NIS2 check.
OutcomeMeaningFirst step
Applies directlyYou are subject to the duty of care and the reporting duty.Baseline assessment and action plan, set up an incident process.
Applies indirectlyYour customers are in scope and pass requirements on contractually.Record your measures so you can answer questionnaires.
Does not applyThe law does not affect you now.Keep basic measures in order; reassess annually.

Frequently asked questions

Is the outcome legally binding?

No. The check gives a substantiated indication based on sector, size and supply chain. For a definitive judgement we look at your specific situation together.

We are not in scope. Why do anything then?

Because customers who are in scope have to assess their supply chain. In practice you get questionnaires and contract clauses, and without answers you drop out.

What does the project cost if we do have to act?

We do the baseline assessment for a fixed price. Many duty-of-care measures are already part of the blends.

Read on

Prefer an answer right away?

Call us or book an introduction. We walk through the criteria with you and say honestly whether it applies to you.