NIS2 Representative

Under Article 26 (3) of Directive (EU) 2022/2555 (NIS2 Directive), if your company is not established in the European Union but provides services within its scope, you may be  required to designate a representative in one of the Member States. This representative acts as the primary point of contact for national cybersecurity and competent authorities, as well as Computer Security Incident Response Teams (CSIRTs).

The representative plays a crucial role in ensuring your company’s compliance with the directive. This includes tasks such as:

• Receiving and forwarding official communications from EU authorities.
• Serving as a liaison during investigations and inquiries.
• Assisting in timely incident reporting as required by the NIS2 Directive.
• Providing authorities with access to documentation related to your cybersecurity measures.

The NIS2 Directive applies to a wide range of essential and important entities across sectors such as:

• Energy
• Transport
• Banking and Financial Market Infrastructures
• Healthcare
• Digital Infrastructure (e.g., cloud computing services, data centers)
• Managed service providers (MSPs) and managed security service providers (MSSPs)

If your company operates in one of these sectors and is not established in the EU, a NIS2 representative is a mandatory requirement for your operations in the European market. Failing to comply with NIS2 requirements can lead to significant fines.