Registering in the national NIS2 entity registry: guide and support
If your business is in scope of Law 5160/2024, registering on the National Cybersecurity Authority’s self-declaration platform is an obligation. We help you prepare the information correctly and complete it.
The National Cybersecurity Authority runs a self-declaration platform for essential and important entities. According to its official FAQ, registration is an obligation of every entity in scope of Law 5160/2024, whether essential or important. The information is submitted without delay and updated when it changes.
The first step is knowing whether you are in scope. Try our free tool and, for the official picture, the Authority’s scope test. If you are not in scope you have no obligation to register, but the Authority may designate an entity as essential or important regardless of size when certain criteria apply.
The information comes from the Authority’s official sources, checked on 5 October 2026. Procedures may change, so always check the platform. ITHACA is not a representative or partner of the Authority, and registration is carried out by the entity itself on the official platform.
- Scope and category check (essential or important) before any action
- A list of the information needed and help collecting it: entity details, legal representative and type of services
- Listing the domain names and IP address ranges the business uses
- Guidance through logging in and completing the platform
- Review of the information before submission and a record of the registration
- A schedule for updating the information when it changes
How registration works
Check whether you are in scope
Use the Authority’s scope test. For questions about scope, the Authority accepts email at nis2info@cyber.gov.gr.
Prepare the information
Indicatively requested: name, tax number, business registry number and address of the entity, the legal representative’s details, the type of services, and technical details such as the IP address range and the domain names. The Authority notes that the list is indicative.
Log in to the platform
Log in with the entity’s credentials at nis2register.cyber.gov.gr. The platform is for legal entities and bodies only, not for individuals.
Submit the information without delay
The obligation applies to every entity in scope of Law 5160/2024 (Article 4, paragraph 3).
Update when things change
If the information changed or was submitted incorrectly, the entity registers again. The platform keeps a history of registrations.
Official sources
The links lead to the official websites of the National Cybersecurity Authority and the Government Gazette. For any compliance decision, these sources always prevail.
- Registration platform for essential and important entitiesThe Authority’s self-declaration platform for entities in scope of the law.
- Registration FAQ (PDF)Official answers on who registers, what information is requested and how changes are made.
- Scope test for Law 5160/2024The Authority’s official check of whether, and as what, an entity is in scope.
- Guide “The NIS2 Directive in Greece” (PDF, in Greek)The Authority’s official guide: sectors, obligations, incident reporting, supervision.
- Law 5160/2024 (Government Gazette A 195/27.11.2024)The text of the law in the Government Gazette (in Greek).
Sources checked: 5 October 2026. ITHACA is not a representative or partner of the Authority.
Frequently asked questions
Is registration mandatory?
Yes, for every entity in scope of Law 5160/2024, essential or important. This follows from Article 4(3) of the law and from the platform’s official FAQ.
What is the registration deadline?
The official FAQ states that entities in scope submit their information “without delay”, and update it when it changes. For any newer instructions or specific dates, check the platform and the Authority’s website.
What if I am not in scope?
You have no obligation to register. The Authority may however designate an entity as essential or important regardless of size when it is the only provider of an essential service in Greece, when a disruption of its service would significantly affect public safety, order or health or create a significant systemic risk, or when it is critical at national or regional level.
Who can register?
The platform is exclusively for legal entities and bodies in scope of the law, and login uses the entity’s credentials.
What if I submitted wrong information?
The entity registers again with the correct information. The platform keeps a history of registrations.
How is the information I submit protected?
According to the Authority, processing complies with the GDPR and Law 4624/2019. The information is collected for the purposes of the law and may be shared with competent bodies for compliance reasons, but not with third parties.
Where do I get help from the Authority?
For technical support or questions about the registration process: register.ncsa@cyber.gov.gr. For scope questions: nis2info@cyber.gov.gr.
What does ITHACA do?
We help you check scope, prepare the information and complete the registration. ITHACA is not a representative or partner of the Authority, and registration is carried out by the entity itself on the official platform.