For organisations that may fall within the scope of the amended Act on the National Cybersecurity System (NCS) implementing NIS2, 3 October 2026 is, as a rule, the deadline for self-identification and entry in the Register of Essential and Important Entities.
The entry itself, however, does not complete the preparations. It marks the end of only the first stage.
Before making the entry, organisations need to, among other things, verify the classification of the given entity, collect the required data, coordinate relevant information within the corporate group and designate contact persons.
After the entry is made, the next stage begins: adapting the organisation to the new organisational, technical and procedural requirements.
These issues may affect, among other things, risk management, business continuity, relationships within the corporate group and the allocation of responsibilities within the organisation.
That is why the final weeks before the deadline should not be treated only as time for formal entry in the register. They are also a good moment to organise the next steps.
Our experts Katarzyna Kęska-Burska and Klaudia Byrt can assist with planning the next steps and assessing obligations under NIS2 and NCS.
