Introduction

This questionnaire is for self-assessment of your company in terms of the services provided and to determine whether your company will fall under any of the regimes of obligations under the upcoming Cybersecurity Act. Select the appropriate answers and follow the instructions based on your answers. Unless it is not specifically stated otherwise, please reflect to all mentioned Acts (e.g., Energy Act, Railway Act etc.) as Czech national Acts as amended because those are necessary for transposition of NIS2 in national legal framework.

Help for filling in

Determining the size of the organization

The determination of the size of your company is governed by Commission Recommendation 2003/361/EC of 6 May 2003 concerning the definition of micro, small and medium-sized enterprises, which defines small and medium-sized enterprises as companies whose number of employees and economic weight fall below certain thresholds:

  • Micro-enterprise: maximum 10 employees and turnover or balance sheet not exceeding EUR 2 million
  • Small enterprise: maximum 50 employees and turnover or balance sheet not exceeding EUR 10 million
  • Medium-sized enterprise: maximum 250 employees, turnover not exceeding EUR 50 million and balance sheet not exceeding EUR 43 million
  • Large enterprise: an enterprise exceeding the values of a medium-sized enterprise

Questionnaire