Glossary · NIS2
Annex I
The list of 11 sectors under NIS2 considered most critical, whose in-scope organisations are classified as essential entities.
Explained in depth: Which sectors NIS2 covers
Annex I of the NIS2 Directive lists the sectors of "high criticality": energy, transport, banking, financial market infrastructure, health, drinking water, waste water, digital infrastructure, ICT service management (B2B), public administration, and space. Organisations in these sectors that meet the size threshold are, as a rule, classified as essential entities and face the strictest supervisory regime under the directive. The sector alone does not determine your obligations. Classification also depends on your organisation's size and, in some cases, on member-state decisions during national transposition. Some entity types in Annex I sectors, such as qualified trust service providers and TLD registries, are in scope regardless of size.
Why it matters
If your organisation operates in an Annex I sector, you should assume proactive supervision, on-site inspections, and the higher penalty ceiling of EUR 10 million or 2% of global annual turnover. Knowing which annex you fall under is the first step of any NIS2 gap analysis.