NIS2 for operators of space ground infrastructure
Ground stations, mission control centres and the networks that connect them support navigation, earth observation and communication services. NIS2 lists operators of this ground-based infrastructure as a sector of high criticality.
In short: Operators of ground-based infrastructure, owned, managed and operated by Member States or private parties, that support space-based services are an Annex I sector under NIS2, excluding providers of public electronic communications networks. Large operators are usually essential and medium-sized ones important. Secrato maps NIS2 and ISO/IEC 27001 to one control set for the ground segment.
Space is a sector of high criticality
The space sector in NIS2 is about the ground segment: the infrastructure on earth that supports space-based services. Operators that also provide public electronic communications are covered under digital infrastructure instead. Check your scope →
Secure the ground segment and prove it
Stations, control centres and networks on record
Record ground stations, control centres, links and supporting systems as assets, and link them to risks, controls, owners and suppliers.
NIS2 today, the EU Space Act tomorrow
The European Commission proposed an EU Space Act in June 2025 with cybersecurity rules for space operators. It is still being negotiated, including how it will relate to NIS2, so build on NIS2 measures that will carry over.
NIS2, ISO/IEC 27001 and customer requirements
Map NIS2, ISO/IEC 27001 and the security requirements of agencies and customers to shared controls, so evidence is collected once.
BUILT FROM BELGIUM
What applies to space operators in Belgium and the Netherlands
In Belgium, the Federal Minister for Science Policy is the sectoral authority for space, with the CCB as the national cybersecurity authority; operators register via Safeonweb@Work. In the Netherlands, operators in scope register with the NCSC via MijnNCSC under the Cyberbeveiligingswet.
Secrato is built in Belgium and hosted in a Tier IV data centre in Antwerp. See the overview of all NIS2 sectors.
Common questions
Which space companies are in scope of NIS2?
Operators of ground-based infrastructure that supports the provision of space-based services, whether owned by a Member State or a private party, when they are at least medium-sized or designated. Providers of public electronic communications networks are covered under digital infrastructure instead.
Are space operators essential or important?
Space is an Annex I sector, so large operators are generally essential entities and medium-sized operators important, unless the authority designates otherwise.
What is the EU Space Act?
A regulation proposed by the European Commission in June 2025 that includes cybersecurity rules for space operators. It is still in the legislative process, and how it will interact with NIS2 is not settled yet.
Which authority is responsible in Belgium?
The Federal Minister for Science Policy is the sectoral authority for space, together with the CCB as the national cybersecurity authority.
See how Secrato supports your space operations
Show us your ground infrastructure and frameworks, and we will map them to NIS2 in Secrato.
