NIS2 Compliance for Space in Slovenia
In short: Space is a NIS2 Annex I sector in Slovenia: large organisations are Essential Entities (fines up to €10M or 2% of global turnover), medium ones Important Entities. In-scope entities must apply the Article 21 security measures and report significant incidents to SI-CERT within 24 hours, 72 hours and one month.
Ground-based infrastructure supporting space services — including satellite command and control, positioning and earth observation systems — is covered under NIS2 Annex I. The sector is critical for navigation, communications and defence.
Reporting to SI-CERT / Information Commissioner
Space entities in Slovenia report significant cybersecurity incidents to SI-CERT, operating under SI-CERT / Information Commissioner. The NIS2 Article 23 timeline applies:
- 24 h Early warning — notify SI-CERT
- 72 h Formal incident notification with initial assessment
- 1 month Final incident report with root cause and remediation
Key cyber risks for Space in Slovenia
- ▸Jamming and spoofing of satellite uplink/downlink
- ▸Cyberattacks on ground station control systems
- ▸Supply-chain compromise of satellite software
- ▸GPS/GNSS dependency exploitation
Key NIS2 obligations for Space entities
- ✓Physical and cyber security of ground stations
- ✓72-hour incident reporting to national authority
- ✓Redundancy for critical space-based services
- ✓Anti-jamming and anti-spoofing measures
Example in-scope organisations
- ·Satellite ground station operators
- ·Space situational awareness service providers
- ·Earth observation data platforms
- ·Space-based communication service operators
Is your Space organisation in scope in Slovenia?
Get a personalised assessment in 30 seconds — obligation checklist, readiness score and gap report included.
Run the free NIS2 scope check →Get the free NIS2 checklist for Space in Slovenia
We email a link to the free printable checklist. No spam — unsubscribe anytime.
Frequently asked questions
Is my Space organisation in scope for NIS2 in Slovenia?
Yes — if you are a medium or large organisation. In Slovenia, Space is a NIS2 Annex I sector. Large organisations are Essential Entities; medium organisations are Important Entities. Transposed via the Information Security Act (ZInfV, 2024); SI-CERT serves as national CSIRT and the Information Commissioner oversees compliance. Use our free scope checker for a personalised result.
Who do I report NIS2 incidents to in Slovenia as a Space entity?
Report significant incidents to SI-CERT (SI-CERT / Information Commissioner). You must submit an early warning within 24 hours, a detailed notification within 72 hours, and a final report within one month — per NIS2 Article 23.
What security measures must Space organisations implement under NIS2 in Slovenia?
Under NIS2 Article 21, organisations must implement risk-proportionate security measures including: Physical and cyber security of ground stations; 72-hour incident reporting to national authority; Redundancy for critical space-based services. Additional requirements may apply under Slovenia's national transposition.
What are the NIS2 fines for Space organisations in Slovenia?
Essential Entities face fines up to €10 million or 2% of global annual turnover under NIS2 Article 34. Slovenia's national transposition may set specific enforcement priorities and fine scales.
Related sectors in Slovenia
Official sources
- NIS2 Directive (EU) 2022/2555 — EUR-Lex
- DORA Regulation (EU) 2022/2554 — EUR-Lex
- ENISA — EU Agency for Cybersecurity
Last reviewed: 2026-07-03
For decision-support purposes only. Exact scope depends on Slovenia's national transposition of NIS2 — verify obligations with a qualified expert.