The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you
Start the system

For telecom and internet providersNACE 61, all of the EU

NIS2 covers you at any size. Show it on one record.

NIS2 reaches public network and service providers whatever their size, and the Accessibility Act covers the services you sell to consumers.

Start your compliance system Check if NIS2 applies to you
Example data

The rules that reach you

What reaches a telecom provider, and from when

One law reaches you whatever your size, one covers your consumer services, and one standard your business and public buyers ask for.

NIS2

Directive (EU) 2022/2555 · EU cybersecurity law

At any size

Annex I point 8 lists providers of public electronic communications networks and of publicly available electronic communications services.

Any sizePublic networks and services are in scope whatever their sizeArt 2(2)(a)
EssentialFrom medium-sized up; smaller providers are important entitiesArt 3(1)
24 h · 72 hEarly warning, then the incident notificationArt 23
Ten measuresFrom incident handling to the supply chain and encryptionArt 21(2)
Annex I, 8Applies since Each member state applies NIS2 through its own law, and transposition varies. State by state

European Accessibility Act

Directive (EU) 2019/882

Consumer services

Electronic communications services you provide to consumers must meet its accessibility requirements; microenterprises providing services are exempt.

Art 2(2)(a)Art 4(5)Since

ISO 27001

ISO/IEC 27001:2022 · a standard

Not a law

Clients and tenders ask for the certificate, and its controls map onto the measures NIS2 Article 21 asks for.

Annex A, 93 controlsYour clients set the date

In numbers

A sector NIS2 reaches at any size

37,565

telecom companies in the EU, and NIS2 sets no size floor for public networks and services.

Source: Eurostat business statistics 2024, NACE 61

about34,000

of them have fewer than 10 staff.

Source: Eurostat business statistics 2024, NACE 61, estimate

24 of27

member states have communicated an act transposing NIS2 to the Commission.

Source: EUR-Lex, national transposition measures, read 23 October 2026

What StandardOS does for a telecom provider

Your NIS2 file, with every clock counted

Every tile is a screen in the product today.

Your ISMS and NIS2 file

ISO 27001 and NIS2 on one record, with the policies drafted for you to approve.

The Article 23 clocks, counted

From the moment you become aware of a significant incident, each report's deadline is on screen.

Every rule as a checklist

Each framework on this page as requirement rows, with an owner, the evidence and a review date.

Evidence from your own stack

12 read-only integrations, Microsoft Entra ID and Intune among them, read on a schedule.

One subscription

Every rule on this page, on one record.

ISO27001CRANIS2DORAISO42001AIACTISO9001MRGDPRDATAACTISO27701EAAISO14001PLDREDGPSRNIS2IRRoHSREACHWEEEPPWRWBBATPTDEUDREEDCER

The 3 on this page, and 24 more for the same price

€249/mo

Every framework included.

excl. VAT, per organization

  • Unlimited users, auditors included
  • 7 days free, no card, no sales call
Start your compliance system

Or one file, once: NIS2 Registration Pack, €199See the pack

Done for you: NIS2 registration, done in a week, €490See the offer

Questions

What telecom providers ask first

Short answers, each with the article it rests on.

We are a small internet provider. Does NIS2 apply?

Yes. Article 2(2)(a) brings providers of public networks and services in whatever their size; below medium-sized you are an important entity, unless your state decides otherwise.

Art 2(2)(a)Art 3
Which state supervises us?

Each state where you provide your networks or services, so a provider active in three states answers to three authorities.

Art 26(1)(a)
Does the Accessibility Act cover our business services?

No. Article 2(2) covers services provided to consumers, and a microenterprise providing services is exempt under Article 4(5).

EAA Art 2(2)EAA Art 4(5)
How fast do we report a significant incident?

An early warning within 24 hours of becoming aware, an incident notification within 72 hours, and a final report within 1 month of that notification.

Art 23(4)

Start with your own file. Keep it current.

7 days free, no card and no sales call.

Start your compliance system Check if NIS2 applies to you

This page in:DeutschFrançaisNederlandsEspañolDansk