Solutions · Energy and utilities
High criticality means the strictest tier and the shortest clocks.
Electricity, gas, oil, heating, hydrogen, drinking water and waste water are Annex I sectors. Large operators are essential entities with the fullest NIS2 duties and supervisory exposure.
Typical profile
- Sector
- Energy
- Employees
- 250 or more
- AI
- Uses AI tools
- Flags
- None
- Energy is an Annex I sector; above the medium-sized ceiling that is an essential entity.
- Essential entities face ex-ante supervision, not just after an incident.
- Grid forecasting and demand models are AI deployments.
Obligations to prove
69
NIS2 essential entity on this profile.
- Regulation (EU) 2016/679 — data protection5
Applies to every organisation established in the EU that processes personal data.
- Directive (EU) 2022/2555 — cybersecurity8
You declared yourself a NIS2 essential entity.
- Commission Implementing Regulation (EU) 2024/2690 — NIS2 Art 21(2) technical requirements48
The Implementing Regulation's 47 technical requirement sections elaborate NIS2 Art 21(2).
- Regulation (EU) 2024/1689 — artificial intelligence8
You build or use AI systems — Art 4 AI literacy already applies; other tiers depend on classification.
First statutory clock if something goes wrong: NIS2 early warning, 24 hours (NIS2 Art 23(4)(a)).
Computed by the platform's scope finder. A starting point, not a legal determination.
The modules that matter here
Get a quote for these 69 obligations.
Tell us about your organisation; the quote covers exactly this scope.
Request a quote →