NISDESK · BG
NIS2 Compliance in Bulgaria
Bulgarian entities in critical sectors must register with SANS and fulfil NIS2 security and incident-reporting obligations.
Are you in scope?
NIS2 covers medium and large organisations in 18 sectors. Fines reach €10M or 2% of global turnover. Check your scope, obligations and a readiness score for free.
National authority & CSIRT
In Bulgaria, NIS2 supervision is handled by State Agency for National Security (SANS) / National CSIRT. The national CSIRT is CERT Bulgaria. Significant incidents must be reported within 24 h (early warning), 72 h (notification) and one month (final report) per NIS2 Article 23.
NIS2 sectors in Bulgaria
Each sector has specific obligations. Explore them for Bulgaria:
Frequently asked questions
Which sectors are covered by NIS2 in Bulgaria?
NIS2 covers 18 sectors: Annex I (highly critical — energy, transport, banking, financial markets, health, water, digital infrastructure, ICT service management, public administration, space) and Annex II (other critical — postal services, waste management, chemicals, food, manufacturing, digital providers, research). NIS2 transposition completed via amendments to the Cybersecurity Act; SANS oversees implementation.
Who supervises NIS2 compliance in Bulgaria?
In Bulgaria, the primary competent authority is State Agency for National Security (SANS) / National CSIRT. The national CSIRT is CERT Bulgaria, which handles significant incident notifications and cybersecurity coordination.
What are the NIS2 incident reporting deadlines in Bulgaria?
Organisations must submit an early warning to CERT Bulgaria within 24 hours of a significant incident, a formal notification within 72 hours, and a final report within one month — per NIS2 Article 23.
What are the NIS2 fines in Bulgaria?
Essential entities face fines up to €10 million or 2% of global annual turnover. Important entities face up to €7 million or 1.4% of global annual turnover. Exact enforcement varies by national transposition.
For decision-support purposes only. Exact scope depends on national transposition — use our free scope checker for a personalised assessment.