{"id":70148,"date":"2026-08-21T18:22:40","date_gmt":"2026-08-21T16:22:40","guid":{"rendered":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/"},"modified":"2026-09-17T14:56:16","modified_gmt":"2026-09-17T12:56:16","slug":"nis2-registration-gap-scope-uncertainty","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/","title":{"rendered":"NIS2 Registration Gap: What It Reveals About Scope Uncertainty"},"content":{"rendered":"<div id=\"sgce-a\" class=\"sgce-article\">\n<p class=\"rc-lede\">The German government originally assumed that almost 30,000 companies would have to register as critical infrastructure under NIS2. In fact, around 10,000 notifications are still missing relative to that expectation, as Golem reports. The government itself does not describe this as a gap in the strict sense. This assessment deserves a closer look, because it says something about the nature of scope determination itself.<\/p>\n<div class=\"rc-tldr\">\n<div class=\"rc-tldr-label\">In short<\/div>\n<p>The gap of roughly 10,000 companies between the number of NIS2-affected entities expected by the German government and the number actually registered with the BSI shows that determining one&#039;s own applicability is a demanding process requiring documentation. Companies should make their sector and threshold assessment traceable in writing, rather than relying on a gut-feeling judgement.<\/p>\n<\/div>\n<nav class=\"rc-toc\" aria-label=\"Contents\">\n<div class=\"rc-toc-label\">Contents<\/div>\n<ol>\n<li><a href=\"#a1-how-large-is-the-gap-between-expected-an\">How large is the gap between expected and registered NIS2-affected entities?<\/a><\/li>\n<li><a href=\"#a2-why-can-companies-not-simply-read-off-wh\">Why can companies not simply read off whether they are affected?<\/a><\/li>\n<li><a href=\"#a3-what-does-this-mean-for-the-quality-of-a\">What does this mean for the quality of a company&#039;s own scope assessment?<\/a><\/li>\n<li><a href=\"#a4-what-does-this-mean-for-companies-outsid\">What does this mean for companies outside Germany?<\/a><\/li>\n<li><a href=\"#a5-how-can-companies-concretely-improve-the\">How can companies concretely improve their own scope assessment?<\/a><\/li>\n<\/ol>\n<\/nav>\n<div class=\"rc-figures\">\n<div class=\"rc-figure-cell\">\n<div class=\"rc-figure-value\" data-to=\"29500\">29&#039;500<span class=\"unit\">entities<\/span><\/div>\n<div class=\"rc-figure-label\">NIS2-affected entities expected by the German government, based on a calculation by the Federal Statistical Office<\/div>\n<div class=\"rc-figure-src\">it-daily.net, NIS2: Nach Nachfrist weiter zu wenig Registrierungen<\/div>\n<\/div>\n<div class=\"rc-figure-cell\">\n<div class=\"rc-figure-value\" data-to=\"10000\">10&#039;000<span class=\"unit\">companies<\/span><\/div>\n<div class=\"rc-figure-label\">gap between expected and actually registered entities<\/div>\n<div class=\"rc-figure-src\">it-daily.net, NIS2: Nach Nachfrist weiter zu wenig Registrierungen<\/div>\n<\/div>\n<div class=\"rc-figure-cell\">\n<div class=\"rc-figure-value\" data-to=\"18\">18<span class=\"unit\">sectors<\/span><\/div>\n<div class=\"rc-figure-label\">sectors relevant to NIS2 classification under the annexes of the BSIG<\/div>\n<div class=\"rc-figure-src\">mars-solutions.de, NIS-2-Registrierung: Frist abgelaufen, L\u00fccke bleibt<\/div>\n<\/div>\n<\/div>\n<h2 id=\"a1-how-large-is-the-gap-between-expected-an\">How large is the gap between expected and registered NIS2-affected entities?<\/h2>\n<p>The expectation of around 29,500 entities subject to registration was based on a calculation by the Federal Statistical Office. The actual number of notifications remained well below that figure.<\/p>\n<p>The expectation of 29,500 affected entities was based on a calculation by the Federal Statistical Office (Statistisches Bundesamt), which the German government relied on when passing the NIS2 Implementation Act. Even after a granted grace period, the gap persisted. Around 10,000 registrations are currently missing relative to the forecast, after only about 11,500 operators had registered properly by the originally set deadline.<\/p>\n<p>It is remarkable how the government frames this gap: not as evidence of systematic non-registration, but as an open question of whether the original estimate itself was set too high. This uncertainty on the statistical side mirrors an uncertainty that also exists on the corporate side.<\/p>\n<h2 id=\"a2-why-can-companies-not-simply-read-off-wh\">Why can companies not simply read off whether they are affected?<\/h2>\n<p>NIS2 applicability results from a combination of sector affiliation and size threshold, which each company must assess and document itself, without any prior notification from the authorities.<\/p>\n<p>Applicability results from two criteria that must both be met: sector affiliation and company size, whereby the relevant annexes list 18 sectors, including energy, transport, health, water, digital infrastructure, IT services, chemicals, food and manufacturing. There is no external assignment by an authority. Affected entities must identify themselves; there are no official notices and no request from an authority.<\/p>\n<p>The association of municipal utilities states the cause clearly: the main reason for the existing registration gap lies in the complexity of the applicability assessment. Where self-assessment without a feedback loop forms the basis, the quality of the internal assessment methodology becomes the decisive factor.<\/p>\n<h2 id=\"a3-what-does-this-mean-for-the-quality-of-a\">What does this mean for the quality of a company&#039;s own scope assessment?<\/h2>\n<p>A one-off, informal assessment is not sufficient, because sector classification, group structures and thresholds can change over time and must be documented in a traceable way.<\/p>\n<p>Experience from Germany shows that even companies with compliance resources can misjudge the classification, or simply overlook that part of their own activity falls into a regulated sector. This affects not only companies with an obvious link to critical infrastructure, but also suppliers and service providers whose classification only arises through chain relationships. A company that carries out its applicability assessment only once, without renewing it at every relevant change, risks quietly growing out of scope or quietly growing into it.<\/p>\n<p>For the GRC function, this means that scope determination itself should be treated as a control object, with clear responsibilities and recurring review. The article &#8220;Rethinking cyber resilience in the context of NIS2&#8221; describes how this requirement can be embedded into an existing resilience concept.<\/p>\n<h2 id=\"a4-what-does-this-mean-for-companies-outsid\">What does this mean for companies outside Germany?<\/h2>\n<p>Swiss companies with subsidiaries, branches or significant customer relationships in the EU should also check whether NIS2 applicability arises through this connection.<\/p>\n<p>The registration gap is a German phenomenon, but the underlying problem of scope determination is not. Each EU member state implements NIS2 with its own deadlines and procedures, which means additional assessment steps for companies operating across borders. The review &#8220;NIS2 resolution in the Bundestag: pressure to act for companies&#8221; outlines the consequences arising from the German implementation for cross-border business relationships.<\/p>\n<p>For Switzerland itself, the discussion around a separate cyber resilience law is running in parallel, with its own systematics. The article &#8220;Federal Council announces new cyber resilience law&#8221; describes the current status of this initiative.<\/p>\n<h2 id=\"a5-how-can-companies-concretely-improve-the\">How can companies concretely improve their own scope assessment?<\/h2>\n<p>The first step is a written, documented sector and threshold analysis, approved by executive management and updated at every relevant structural change.<\/p>\n<p>The analysis should record which activity is assigned to which sector, which size indicators were used, and who is responsible for the assessment. This documentation serves not only internal clarity but also as evidence towards supervisory authorities and business partners, who increasingly demand proof themselves. The article &#8220;ISMS: people, processes and technology are decisive&#8221; shows how such an assessment can be integrated into an existing management system.<\/p>\n<p>The compliance or risk officer should complete the scope analysis before the next management review of the information security management system and submit it to the person responsible for governance for approval. This is a manageable, verifiable first step that can be implemented regardless of company size.<\/p>\n<aside class=\"rc-takeaways\">\n<div class=\"rc-takeaways-label\">For practice<\/div>\n<h2>Key points<\/h2>\n<ul>\n<li>The gap between expected and registered NIS2-affected entities points mainly to methodological uncertainty in scope determination, not necessarily to widespread refusal.<\/li>\n<li>Sector affiliation and size threshold must be assessed together, without any authority notifying the classification in advance.<\/li>\n<li>A one-off assessment is not enough, because group structures, fields of activity and key figures change over time.<\/li>\n<li>Swiss companies with EU exposure should assess their own applicability independently of the German discussion.<\/li>\n<li>A written, documented scope analysis approved by executive management is the verifiable first step.<\/li>\n<\/ul>\n<\/aside>\n<section class=\"rc-faq\">\n<div class=\"rc-faq-head\">\n<div class=\"rc-faq-label\">FAQ<\/div>\n<h2>Frequently asked questions<\/h2>\n<\/div>\n<div class=\"rc-faq-list\">\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What is the NIS2 registration gap?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>The German government expected around 29,500 companies to be subject to NIS2 registration, based on a calculation by the Federal Statistical Office. By the original deadline, however, only around 11,500 operators had registered, and around 10,000 notifications are still missing relative to the forecast today. The government does not treat this as proof of non-registration, but also as a possible overestimation of the original figure.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Which criteria determine whether a company is affected by NIS2?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Applicability results from two criteria that must both be met: affiliation with one of the 18 listed sectors, such as energy, transport, health or IT services, and reaching certain company size thresholds. There is no external classification by an authority; companies must identify themselves.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Do Swiss companies need to concern themselves with NIS2?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>NIS2 is EU law that directly applies only to companies within member states. Swiss companies with subsidiaries, branches or significant customer relationships in the EU should nonetheless check whether applicability arises through this connection. For Switzerland itself, a separate cyber resilience law is being discussed in parallel.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Why is a one-off assessment of NIS2 applicability not sufficient?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Sector classification, group structures and thresholds can change over time, for example through growth, restructuring or new business lines. A company that carries out the applicability assessment only once risks unnoticed growing out of or into scope. The assessment should therefore be renewed and documented at every relevant change.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">How should an NIS2 scope analysis be documented?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>The documentation should record which activity is assigned to which sector, which size indicators were used, and who is responsible for the assessment. It should be approved by executive management and updated at relevant structural changes. This documentation also serves as evidence towards authorities and business partners.<\/p>\n<\/div>\n<\/details>\n<\/div>\n<\/section>\n<section class=\"rc-sources\">\n<div class=\"rc-sources-label\">Sources<\/div>\n<ol>\n<li><a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/Regulierte-Wirtschaft\/NIS-2-regulierte-Unternehmen\/nis-2-regulierte-unternehmen_node.html\" target=\"_blank\" rel=\"noopener nofollow\">NIS-2-regulierte Unternehmen<\/a><span class=\"rc-source-pub\">Bundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI)<\/span><\/li>\n<\/ol>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The gap of roughly 10,000 companies between the number of NIS2-affected entities expected by the German government and the number actually registered with the BSI shows that determining one&#8217;s own applicability is a demanding process requiring documentation. Companies should make their sector and threshold assessment traceable in writing, rather than relying on a gut-feeling judgement.<\/p>\n","protected":false},"author":5,"featured_media":70149,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Yahya Mohamed Mao","real_author_title":"Chief Marketing Officer","real_author_bio":"Views GRC through the lens of market, brand and growth. Writes about making complex topics accessible, building trust and what it takes to position and scale a specialized software platform internationally.","real_author_photo":70555,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[105],"tags":[106,107,108,109,110],"class_list":["post-70148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-regulation-supervision","tag-nis2-scope-determination","tag-sector-and-threshold-assessment","tag-nis2-registration-requirement","tag-critical-infrastructure-nis2","tag-grc-scope-analysis"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"superadmin\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"ar_AR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Assessing NIS2 scope: lessons from the registration gap\" \/>\n\t\t<meta property=\"og:description\" content=\"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-21T16:22:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T12:56:16+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Assessing NIS2 scope: lessons from the registration gap\" \/>\n\t\t<meta name=\"twitter:description\" content=\"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/yahya-mohamed-mao-12.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#blogposting\",\"name\":\"Assessing NIS2 scope: lessons from the registration gap\",\"headline\":\"NIS2 Registration Gap: What It Reveals About Scope Uncertainty\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/08\\\/nis2-registration-gap-scope-uncertainty-swissgrc.webp\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category EU-NIS2 (EU 2022\\\/2555)\"},\"datePublished\":\"2026-08-21T18:22:40+02:00\",\"dateModified\":\"2026-09-17T14:56:16+02:00\",\"inLanguage\":\"ar\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#webpage\"},\"articleSection\":\"Regulation &amp; Supervision, NIS2 scope determination, sector and threshold assessment, NIS2 registration requirement, critical infrastructure NIS2, GRC scope analysis\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"position\":2,\"name\":\"Regulation &amp; Supervision\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#listItem\",\"name\":\"NIS2 Registration Gap: What It Reveals About Scope Uncertainty\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#listItem\",\"position\":3,\"name\":\"NIS2 Registration Gap: What It Reveals About Scope Uncertainty\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/\",\"name\":\"superadmin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"superadmin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/\",\"name\":\"Assessing NIS2 scope: lessons from the registration gap\",\"description\":\"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.\",\"inLanguage\":\"ar\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/08\\\/nis2-registration-gap-scope-uncertainty-swissgrc.webp\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#mainImage\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category EU-NIS2 (EU 2022\\\/2555)\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/nis2-registration-gap-scope-uncertainty\\\/#mainImage\"},\"datePublished\":\"2026-08-21T18:22:40+02:00\",\"dateModified\":\"2026-09-17T14:56:16+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"ar\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Assessing NIS2 scope: lessons from the registration gap<\/title>\n\n","aioseo_head_json":{"title":"Assessing NIS2 scope: lessons from the registration gap","description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","canonical_url":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#blogposting","name":"Assessing NIS2 scope: lessons from the registration gap","headline":"NIS2 Registration Gap: What It Reveals About Scope Uncertainty","author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category EU-NIS2 (EU 2022\/2555)"},"datePublished":"2026-08-21T18:22:40+02:00","dateModified":"2026-09-17T14:56:16+02:00","inLanguage":"ar","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#webpage"},"articleSection":"Regulation &amp; Supervision, NIS2 scope determination, sector and threshold assessment, NIS2 registration requirement, critical infrastructure NIS2, GRC scope analysis"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/ar\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","position":2,"name":"Regulation &amp; Supervision","item":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#listItem","name":"NIS2 Registration Gap: What It Reveals About Scope Uncertainty"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#listItem","position":3,"name":"NIS2 Registration Gap: What It Reveals About Scope Uncertainty","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/ar\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/ar\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author","url":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/","name":"superadmin","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g","width":96,"height":96,"caption":"superadmin"}},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#webpage","url":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/","name":"Assessing NIS2 scope: lessons from the registration gap","description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","inLanguage":"ar","isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp","@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#mainImage","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category EU-NIS2 (EU 2022\/2555)"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/#mainImage"},"datePublished":"2026-08-21T18:22:40+02:00","dateModified":"2026-09-17T14:56:16+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/ar\/#website","url":"https:\/\/swissgrc.com\/ar\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"ar","publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"}}]},"og:locale":"ar_AR","og:site_name":"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"Assessing NIS2 scope: lessons from the registration gap","og:description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","og:url":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/","og:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp","og:image:secure_url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/nis2-registration-gap-scope-uncertainty-swissgrc.webp","og:image:width":1200,"og:image:height":630,"article:published_time":"2026-08-21T16:22:40+00:00","article:modified_time":"2026-09-17T12:56:16+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"Assessing NIS2 scope: lessons from the registration gap","twitter:description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/08\/yahya-mohamed-mao-12.jpg","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"7 minutes"},"aioseo_meta_data":{"post_id":"70148","title":"Assessing NIS2 scope: lessons from the registration gap","description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","keywords":null,"keyphrases":{"focus":{"keyphrase":"NIS2 applicability","score":0,"analysis":[]},"additional":[{"keyphrase":"NIS2 scope determination","score":0,"analysis":[]},{"keyphrase":"sector and threshold assessment","score":0,"analysis":[]},{"keyphrase":"NIS2 registration requirement","score":0,"analysis":[]},{"keyphrase":"critical infrastructure NIS2","score":0,"analysis":[]},{"keyphrase":"GRC scope analysis","score":0,"analysis":[]}]},"primary_term":null,"canonical_url":null,"og_title":"Assessing NIS2 scope: lessons from the registration gap","og_description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":"Assessing NIS2 scope: lessons from the registration gap","twitter_description":"The NIS2 registration gap shows that applicability cannot simply be read off. It must be documented and reviewed regularly.","schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-17 12:56:47","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-08-21 18:22:40","updated":"2026-09-17 13:11:42","focus_keyword":"NIS2 applicability","additional_keywords":[{"word":"NIS2 scope determination","score":74,"items":{"introductionKeyword":{"score":6},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"sector and threshold assessment","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"NIS2 registration requirement","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"critical infrastructure NIS2","score":80,"items":{"introductionKeyword":{"score":9},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"GRC scope analysis","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/\" title=\"Regulation &amp; Supervision\">Regulation &amp; Supervision<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tNIS2 Registration Gap: What It Reveals About Scope Uncertainty\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/ar\/"},{"label":"Regulation &amp; Supervision","link":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/"},{"label":"NIS2 Registration Gap: What It Reveals About Scope Uncertainty","link":"https:\/\/swissgrc.com\/ar\/nis2-registration-gap-scope-uncertainty\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/comments?post=70148"}],"version-history":[{"count":4,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70148\/revisions"}],"predecessor-version":[{"id":70332,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70148\/revisions\/70332"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media\/70149"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media?parent=70148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/categories?post=70148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/tags?post=70148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}