Skip to main content
TruSecure — Home
NIS2 · CYPRUS

NIS2 in Cyprus

Competent authority: Digital Security Authority (DSA). Transposition vehicle: National law.

Notable: Cyprus's small market size means most in-scope entities are subsidiaries of larger regional groups.

Check your Cyprus NIS2 obligations →

Frequently asked questions

Does NIS2 apply to a Cyprus subsidiary of a non-EU parent company?
Yes, where the Cyprus entity itself meets the size and sector thresholds — Cyprus's small market means most in-scope entities are subsidiaries of larger regional groups, and TruSecure assesses the Cyprus entity on its own facts, not the parent's.

TruSecure helps operationalize requirements and prepare evidence. Legal interpretation should be validated by qualified counsel.

Ask an AI about TruSecure

NIS2 (Directive (EU) 2022/2555) is enforced in Cyprus by Digital Security Authority (DSA). TruSecure determines applicability against Cyprus's national transposition specifically, rather than the EU baseline alone, and maps its requirements to a single control model shared across every framework it supports. TruSecure is operated by European entities — TRUSECURE S.R.L. in Romania and Trusecure Ltd in the United Kingdom — and stores all Customer Content with a single EU sub-processor in French and German datacentres. No Customer Content is transferred to the United States or to Asia, so the EU–US Data Privacy Framework is not a dependency.

Frequently Asked Questions

Does NIS2 apply to a Cyprus subsidiary of a non-EU parent company?
Yes, where the Cyprus entity itself meets the size and sector thresholds — Cyprus's small market means most in-scope entities are subsidiaries of larger regional groups, and TruSecure assesses the Cyprus entity on its own facts, not the parent's.