NIS2 · SPAIN
NIS2 in Spain
Competent authority: INCIBE (private) + CCN (public). Transposition vehicle: National law.
Notable: This dual-track structure is a genuinely important fact for Spanish entities working out who they report to.
Frequently asked questions
Do private companies in Spain report to INCIBE or CCN?
Private-sector entities generally report to INCIBE; public-sector and defence-adjacent entities to CCN — Spain's dual-track structure means TruSecure's applicability engine routes your entity to the correct authority based on sector, not just size.
TruSecure helps operationalize requirements and prepare evidence. Legal interpretation should be validated by qualified counsel.
Frequently Asked Questions
Do private companies in Spain report to INCIBE or CCN?
Private-sector entities generally report to INCIBE; public-sector and defence-adjacent entities to CCN — Spain's dual-track structure means TruSecure's applicability engine routes your entity to the correct authority based on sector, not just size.