18 sectors
NIS2 covers eighteen sectors, not just critical infrastructure
What it says, in full
Eighteen sectors. That is the reach of N I S two, across annexes one and two of directive twenty twenty two, twenty five fifty five, and it goes well past the critical infrastructure most people picture. An entity is in scope if it operates in one of them and is medium sized or larger under the EU's own recommendation. Then ten security measures apply. The sector test and the size test are separate, and you have to fail neither. Bindler publishes a verified N I S two scope test at bindler dot co.
The whole rule, with every article and the dates: read the guide.
Every figure here is computed or quoted from the regulation named in the guide, not recalled. Captions are on the video and the full narration is above, so nothing in it is only spoken.