{"id":3802,"date":"2026-11-12T16:25:28","date_gmt":"2026-11-12T14:25:28","guid":{"rendered":"https:\/\/mikinski.bg\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/"},"modified":"2026-11-12T16:28:45","modified_gmt":"2026-11-12T14:28:45","slug":"nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements","status":"publish","type":"post","link":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/","title":{"rendered":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"3802\" class=\"elementor elementor-3802 elementor-3796\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-495d228b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"495d228b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3eabf5bd\" data-id=\"3eabf5bd\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4a42a4eb elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4a42a4eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Cybersecurity is no longer an issue that affects only banks, telecoms operators and large technology companies. The European Union has significantly expanded the range of organisations required to organise the protection of their information systems, manage the risks of cyber-attacks and respond promptly to incidents.<\/p><p>The key European legislation in this area is Directive (EU) 2022\/2555, known as NIS 2. In Bulgaria, its requirements are being implemented through the Cybersecurity Act (CSA).<\/p><p><strong>What are NIS 2 and the Cybersecurity Act?<\/strong><\/p><p>NIS 2 is a European directive that aims to raise the overall level of cybersecurity in the European Union. It requires certain businesses and organisations to take measures to protect their networks and information systems, to assess and manage risks, to maintain preparedness to respond to cyber incidents, and to report certain incidents to the competent authorities. They must implement proportionate measures \u2014 such as access controls, backups and recovery plans \u2014 and report significant incidents, with management approving the measures and monitoring their implementation.<\/p><p>The Cybersecurity Act governs the implementation of these requirements in Bulgaria. It sets out which organisations fall within the scope of the regulation, what their obligations are, and which authorities are responsible for oversight.<\/p><p><strong>It is important to note that <\/strong>NIS 2 does not apply solely to companies operating in the information technology sector. It also covers enterprises in traditional economic sectors \u2013 for example, the manufacture of motor vehicles and vehicle parts, the food and drink industry, the chemical industry and the manufacture of medical devices.<\/p><p><strong>Which organisations fall within the scope?<\/strong><\/p><p>NIS 2 and the Cyber Security Act cover organisations from specific economic sectors, divided broadly into two groups \u2013 essential and important entities. The sectors are listed in Annex I and Annex II to the Directive and the corresponding annexes to the Bulgarian Act.<\/p><p>The main categories are set out below, with examples to help organisations determine whether their activities may fall within the scope.<\/p><ol><li><strong> High-criticality sectors \u2013 Annex I<\/strong><\/li><\/ol><p>This group includes organisations whose activities are particularly important for the functioning of society, the economy and essential services.<\/p><ul><li><strong>Energy <\/strong>\u2013 enterprises involved in the generation, transmission and distribution of electricity, oil and natural gas, as well as district heating.<\/li><li><strong>Transport <\/strong>\u2013 air, rail, water and road transport, including certain transport infrastructure operators and traffic management service providers.<\/li><li><strong>Banking <\/strong>\u2013 credit institutions.<\/li><li><strong>Financial market infrastructure <\/strong>\u2013 operators of trading venues and central counterparties.<\/li><li><strong>Healthcare <\/strong>\u2013 healthcare facilities, laboratories and certain manufacturers of pharmaceutical products and active pharmaceutical ingredients.<\/li><li><strong>Drinking water <\/strong>\u2013 drinking water suppliers and distributors.<\/li><li><strong>Wastewater <\/strong>\u2013 undertakings that collect, convey or treat urban wastewater.<\/li><li><strong>Digital infrastructure <\/strong>\u2013 providers of internet exchange points, DNS services, top-level domain registries, cloud services, data centres, content delivery networks and trust services.<\/li><li><strong>Business-to-business ICT service management <\/strong>\u2013 providers of managed services and managed security services.<\/li><li><strong>Public administration <\/strong>\u2013 certain public administrative bodies.<\/li><li><strong>Space sector <\/strong>\u2013 certain operators of ground-based infrastructure supporting space services.<\/li><\/ul><ol start=\"2\"><li><strong> Other critical sectors \u2013 Annex II<\/strong><\/li><\/ol><p>This group is particularly important for enterprises in the manufacturing sector, trade and the food industry. It includes:<\/p><ul><li><strong>Postal and courier services <\/strong>\u2013 operators providing postal services, including courier services.<\/li><li><strong>Waste management <\/strong>\u2013 enterprises engaged in the collection, treatment, disposal or recovery of waste.<\/li><li><strong>Food production, processing and distribution <\/strong>\u2013 enterprises engaged in the industrial production or processing of food, as well as wholesale trade and industrial production and processing of food.<\/li><li><strong>Manufacturing <\/strong>\u2013 certain activities in the chemical industry, the manufacture of medical devices, electrical and electronic equipment, machinery, vehicles and other industrial products.<\/li><li><strong>Digital services <\/strong>\u2013 providers of online marketplaces, online search engines and social networking platforms.<\/li><li><strong>Scientific research <\/strong>\u2013 research organisations where their main activity is research and development.<\/li><\/ul><p><strong>Is it sufficient for a company to operate in any of the sectors listed?<\/strong><\/p><p>No. For most private enterprises, certain size criteria must also be met.<\/p><p>As a general rule, the scope covers medium-sized and large enterprises operating in any of the sectors listed in Annex I or II. When determining size, the applicable rules on partner and affiliated enterprises are taken into account; therefore, group affiliation may be relevant.<\/p><p>There are also exceptions where the law applies regardless of size \u2013 for example, to certain providers of public electronic communications services, DNS services, registries for top-level domains, and domain registration service providers. It is possible that the scope may be extended to include entities of specific critical importance to society or the economy.<\/p><p><strong>What must an organisation do if it falls within the scope?<\/strong><\/p><p>Organisations that are essential or important entities must establish an appropriate cyber risk management system. This includes, amongst other things:<\/p><ul><li>adopting internal cybersecurity policies, rules and procedures;<\/li><li>identifying responsible persons and allocating powers;<\/li><li>assessing and managing risks to information systems;<\/li><li>measures for access control, network protection and vulnerability management;<\/li><li>rules for incident response and reporting;<\/li><li>business continuity and recovery plans;<\/li><li>controls over supplier security;<\/li><li>training for staff and management;<\/li><li>periodic review and verification of the effectiveness of the measures.<\/li><\/ul><p>This does not mean that every organisation must purchase a specific technology or implement an identical set of documents. The measures must be tailored to the nature of the business, its size, the risks involved and the importance of the systems to the organisation\u2019s operations.<\/p><p><strong>How can you tell if your company falls under NIS 2 and the Cybersecurity Act?<\/strong><\/p><p>For an initial assessment, check:<\/p><ol><li><strong>What is the company\u2019s actual <\/strong>business<strong> activity? <\/strong>Do not rely solely on the business description in the Commercial Register. What matters are the activities actually carried out and the applicable NACE code.<\/li><li><strong>Which sector does the activity fall into? <\/strong>Compare it with the sectors listed in Annexes I and II to the ZKS.<\/li><li><strong>How many employees does the company have and what are its financial indicators? <\/strong>Also check the applicable rules regarding affiliated and partner companies.<\/li><li><strong>Does the company provide specialised services? <\/strong>For certain activities, including electronic communications services, DNS and domain name registration, special rules apply regardless of size.<\/li><li><strong>Does the company have a special status or critical importance? <\/strong>This may result in it falling within the scope of the Act even outside the general criteria.<\/li><\/ol><p><strong>Do not assume that a small size or a lack of activity in the IT sector automatically excludes the application of the law. <\/strong>There are specific grounds for inclusion, and the assessment must be made in relation to the specific activity and the legal criteria.<\/p><p><strong>Is a legal assessment required?<\/strong><\/p><p>Falling within the scope of NIS 2 and the Cyber Security Act entails specific organisational, technical and legal obligations. An incorrect assessment may result in both a failure to comply with legal requirements and unnecessary expenditure on measures that are not applicable to the company in question.<\/p><p>If you are unsure whether your company falls within the scope of the new requirements, it is advisable to carry out a preliminary legal assessment before proceeding to establish a compliance system.<\/p><p>The team at mikinski&amp;p artners can assist with analysing the nature and scale of your business, determining the applicable category, assessing existing measures, and preparing the necessary internal policies, rules and procedures to ensure compliance with NIS 2 and the Cybersecurity Act.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Cybersecurity is no longer an issue that affects only banks, telecoms operators and large technology companies. The European Union has significantly expanded the range of organisations required to organise the protection of their information systems, manage the risks of cyber-attacks and respond promptly to incidents. The key European legislation in this area is Directive (EU) [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[65],"tags":[77],"class_list":["post-3802","post","type-post","status-publish","format-standard","hentry","category-personal-data-protection-en","tag-valeriya-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners\" \/>\n<meta property=\"og:description\" content=\"Cybersecurity is no longer an issue that affects only banks, telecoms operators and large technology companies. The European Union has significantly expanded the range of organisations required to organise the protection of their information systems, manage the risks of cyber-attacks and respond promptly to incidents. The key European legislation in this area is Directive (EU) [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/\" \/>\n<meta property=\"og:site_name\" content=\"Mikinski &amp; Partners\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-12T14:25:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T14:28:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mikinski.bg\/wp-content\/uploads\/2022\/05\/hero3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"822\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"lp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"lp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/\"},\"author\":{\"name\":\"lp\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#\\\/schema\\\/person\\\/4a3dc1a81a14064a0968d71dbcb99177\"},\"headline\":\"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements?\",\"datePublished\":\"2026-11-12T14:25:28+00:00\",\"dateModified\":\"2026-11-12T14:28:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/\"},\"wordCount\":1180,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#organization\"},\"keywords\":[\"Valeriya\"],\"articleSection\":[\"Personal Data\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/\",\"url\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/\",\"name\":\"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#website\"},\"datePublished\":\"2026-11-12T14:25:28+00:00\",\"dateModified\":\"2026-11-12T14:28:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/\",\"name\":\"Mikinski &amp; Partners\",\"description\":\"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e\",\"publisher\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#organization\",\"name\":\"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e \u041c\u0438\u043a\u0438\u043d\u0441\u043a\u0438 \u0438 \u0421\u044a\u0434\u0440\u0443\u0436\u043d\u0438\u0446\u0438\",\"url\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mikinski.bg\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Logo-Mikinski.svg\",\"contentUrl\":\"https:\\\/\\\/mikinski.bg\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Logo-Mikinski.svg\",\"width\":412,\"height\":95,\"caption\":\"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e \u041c\u0438\u043a\u0438\u043d\u0441\u043a\u0438 \u0438 \u0421\u044a\u0434\u0440\u0443\u0436\u043d\u0438\u0446\u0438\"},\"image\":{\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/mikinski-and-partners-law-office\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mikinski.bg\\\/en\\\/#\\\/schema\\\/person\\\/4a3dc1a81a14064a0968d71dbcb99177\",\"name\":\"lp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g\",\"caption\":\"lp\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/","og_locale":"en_US","og_type":"article","og_title":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners","og_description":"Cybersecurity is no longer an issue that affects only banks, telecoms operators and large technology companies. The European Union has significantly expanded the range of organisations required to organise the protection of their information systems, manage the risks of cyber-attacks and respond promptly to incidents. The key European legislation in this area is Directive (EU) [&hellip;]","og_url":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/","og_site_name":"Mikinski &amp; Partners","article_published_time":"2026-11-12T14:25:28+00:00","article_modified_time":"2026-11-12T14:28:45+00:00","og_image":[{"width":1920,"height":822,"url":"https:\/\/mikinski.bg\/wp-content\/uploads\/2022\/05\/hero3.jpg","type":"image\/jpeg"}],"author":"lp","twitter_card":"summary_large_image","twitter_misc":{"Written by":"lp","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/#article","isPartOf":{"@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/"},"author":{"name":"lp","@id":"https:\/\/mikinski.bg\/en\/#\/schema\/person\/4a3dc1a81a14064a0968d71dbcb99177"},"headline":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements?","datePublished":"2026-11-12T14:25:28+00:00","dateModified":"2026-11-12T14:28:45+00:00","mainEntityOfPage":{"@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/"},"wordCount":1180,"commentCount":0,"publisher":{"@id":"https:\/\/mikinski.bg\/en\/#organization"},"keywords":["Valeriya"],"articleSection":["Personal Data"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/","url":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/","name":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements? | Mikinski &amp; Partners","isPartOf":{"@id":"https:\/\/mikinski.bg\/en\/#website"},"datePublished":"2026-11-12T14:25:28+00:00","dateModified":"2026-11-12T14:28:45+00:00","breadcrumb":{"@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/mikinski.bg\/en\/nis-2-and-the-cybersecurity-act-does-your-company-fall-under-the-scope-of-the-new-requirements\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mikinski.bg\/en\/home\/"},{"@type":"ListItem","position":2,"name":"NIS 2 and the Cybersecurity Act: does your company fall within the scope of the new requirements?"}]},{"@type":"WebSite","@id":"https:\/\/mikinski.bg\/en\/#website","url":"https:\/\/mikinski.bg\/en\/","name":"Mikinski &amp; Partners","description":"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e","publisher":{"@id":"https:\/\/mikinski.bg\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mikinski.bg\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mikinski.bg\/en\/#organization","name":"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e \u041c\u0438\u043a\u0438\u043d\u0441\u043a\u0438 \u0438 \u0421\u044a\u0434\u0440\u0443\u0436\u043d\u0438\u0446\u0438","url":"https:\/\/mikinski.bg\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mikinski.bg\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mikinski.bg\/wp-content\/uploads\/2022\/05\/Logo-Mikinski.svg","contentUrl":"https:\/\/mikinski.bg\/wp-content\/uploads\/2022\/05\/Logo-Mikinski.svg","width":412,"height":95,"caption":"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u0441\u043a\u043e \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u043e \u041c\u0438\u043a\u0438\u043d\u0441\u043a\u0438 \u0438 \u0421\u044a\u0434\u0440\u0443\u0436\u043d\u0438\u0446\u0438"},"image":{"@id":"https:\/\/mikinski.bg\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/mikinski-and-partners-law-office\/"]},{"@type":"Person","@id":"https:\/\/mikinski.bg\/en\/#\/schema\/person\/4a3dc1a81a14064a0968d71dbcb99177","name":"lp","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f9307b294c48244b8747884bd21954194714fc416187f53babd01c77dbd89375?s=96&d=mm&r=g","caption":"lp"}}]}},"_links":{"self":[{"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/posts\/3802","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/comments?post=3802"}],"version-history":[{"count":5,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/posts\/3802\/revisions"}],"predecessor-version":[{"id":3807,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/posts\/3802\/revisions\/3807"}],"wp:attachment":[{"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/media?parent=3802"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/categories?post=3802"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mikinski.bg\/en\/wp-json\/wp\/v2\/tags?post=3802"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}