NIS2 Art.27.1: Entity Registration with National Authorities

Run a scoping assessment first. Review the sector definitions in Annexes I (essential entities) and II (important entities), apply the size thresholds (generally medium and large enterprises, with some exceptions), and check whether any national implementation provisions affect your classification. Pull together the required registration data: legal entity name and registration details, your sector, subsector, and entity type classification, addresses of your main establishment and any other EU establishments, contact details for cybersecurity communications (email, phone, designated contact persons), all IP address ranges used by the organisation, and your domain name registrations. Submit through whatever mechanism your national competent authority has set up - typically an online portal or structured form. Make sure you hit the national deadline. Put a process in place to keep the registration current. Define what triggers an update: changes to legal entity details, new contact information, acquisition of new IP ranges or domains, changes to your sector classification, or any expansion or reduction of EU establishments. Assign a specific person - your compliance officer or IT governance lead - to own the registration. Set calendar reminders for periodic review even if nothing has changed. Keep records of the initial registration and all subsequent updates. If an auditor asks to see your registration history, you want it readily available. For organisations operating across multiple Member States, determine your primary jurisdiction for NIS2 and understand any additional registration requirements elsewhere.