Sectors
Sectors we cover
Entity category is determined by the sector listed in the annexes to the Act and by size, subject to a number of exceptions. For each sector we set out which measures carry the most work in practice, who is competent, and what we most often find.
High-criticality sectors
Annex I of the Act. Large entities are essential, medium ones important - subject to exceptions where size is not the criterion.
Annex I
National CERT
Banking and finance
CSA AND DORA, PARALLEL OBLIGATIONS
4 priority measures
Open →
Annex I
National CERT
Insurance
DORA FOR ICT RISK · ISO 27001 AND CONTINUITY
4 priority measures
Open →
Annex I
NCSC-HR
Energy
GENERATION, TRANSMISSION, DISTRIBUTION, GAS AND OIL
4 priority measures
Open →
Annex I
NCSC-HR
Healthcare and pharma
HOSPITALS, CLINICS, PHARMACIES, MEDICINAL PRODUCTS
4 priority measures
Open →
Annex I
NCSC-HR
Digital infrastructure and ICT
DATA CENTRES, CLOUD, NETWORKS, MANAGED SERVICES
4 priority measures
Open →
Annex I
NCSC-HR
Public administration
STATE ADMINISTRATION BODIES ESSENTIAL REGARDLESS OF SIZE
4 priority measures
Open →
Annex I
NCSC-HR
Transport and logistics
AIR, RAIL, WATER AND ROAD
4 priority measures
Open →
Other critical sectors
Annex II of the Act. Medium and large entities are classified as important entities.