Browse sector guidance.
The sector pages provide a starting point for mapping services and dependencies. They do not make a formal scope determination.
Energy
Electricity, district heating and cooling, oil, gas and hydrogen activities appear in the Directive’s high criticality sector annex. Exact entity categories and national rules need checking.
↗Annex IHealth
The health sector includes categories such as healthcare providers and certain research and pharmaceutical activities. Scope depends on the entity and applicable national law.
↗Annex IDigital infrastructure
The Directive identifies a number of digital infrastructure services, including DNS, cloud and data centre categories. Some categories have specific implementing rules.
↗Annex IIManufacturing
Selected manufacturing categories are included in the Directive’s other critical sectors annex. Product and entity classifications need a careful scope review.
↗Annex ITransport
Air, rail, water and road transport categories appear in the high criticality sector annex. The role an organisation performs matters for scope.
↗Annex IBanking
Credit institutions appear in the banking category. Sector-specific EU acts, including DORA, can affect the applicable cybersecurity framework.
↗