Start with the organisation's actual scope and decision.

Build the scope record before the work plan.

A useful NIS2 record separates the legal position, the market request and the operating response. It states its sources, assumptions, owner and review date. Accel Comply can structure that record and the related operating work, but does not provide the legal conclusion.

1. Which entity and service are being assessed?

Record the legal entity, the services it provides, the countries involved and the sector classification being considered. A group-level description is not enough when the conclusion applies to one entity or service.

Size tests, special inclusions, exclusions and sector-specific legislation can change the result. Use qualified legal advice where the legal position affects a filing, contract or management decision.

2. What evidence supports the current position?

Collect only what is needed to support the decision and the next action:

• Entity: legal name, registration and group boundary
• Services: what is supplied, to whom and in which jurisdictions
• Sector: the classification being tested and why
• Thresholds: the facts used for size or special-scope tests
• Primary text: the current EU, Danish and sector-specific sources relied on
• Legal boundary: what counsel has confirmed and what remains uncertain
• Customer request: the evidence or contract position the market process requires
• Operating owner: who maintains the controls, records and response process
• Decision owner: who accepts the position and authorises the next action
• Review point: the date or event that requires the position to be checked again

3. Who owns the conclusion and the work?

Keep the legal adviser, management decision owner and operating owner distinct. One person may contribute to several parts, but accountability should not disappear inside a working group.

4. Which clocks matter?

Record each clock by source. Do not merge them into a generic NIS2 deadline:

• Legal clock: the event, threshold and authority defined by applicable law
• Customer clock: the notification or evidence duty written into the contract
• Internal clock: the escalation point that lets the right owner act in time

Do not use penalty figures as a scoping shortcut.

Penalty headlines do not establish whether a particular entity is covered or what it must do next. Establish scope, authority and evidence first.

Danish authority and sector context

Danish NIS2 supervision is divided across competent authorities by sector. The correct authority is therefore part of the scope record, not an afterthought.

A customer request may still require an operating response even when it does not determine the supplier's direct legal scope. Record those two questions separately.

Primary sources

Check the current text and the competent authority for the sector before relying on a legal position.

• Consolidated NIS2 Directive on EUR-Lex
• Danish NIS 2 Act on Retsinformation
• SAMSIK overview of competent authorities

How Accel Comply supports the operating decision

1. Record the entity, service, source and decision that made the question current.
2. Separate the legal conclusion from the customer and operating requirements.
3. Name the people who decide, provide evidence and own follow-up.
4. Choose whether to stop, act internally or agree a clearly defined engagement.

When this page is most useful

Use this page when a specific customer, management or scope decision needs a named owner. It is general information, not legal advice or a legal determination for the organisation.