NIS2 for ports, airports, rail, road and logistics
Air, rail, water and road transport are sectors of high criticality under NIS2, and postal and courier services are another critical sector. Ports, terminals, carriers and logistics hubs depend on connected systems, many partners and continuous operations.
In short: Transport is an Annex I sector under NIS2, covering air carriers and airports, rail infrastructure managers and operators, shipping companies, port authorities and vessel traffic services, and road authorities and intelligent transport systems. Postal and courier services are in Annex II. Secrato maps NIS2, CyFun® and ISO/IEC 27001 to one control set across all your sites and suppliers.
Transport is a sector of high criticality
Large transport operators are generally essential entities and medium-sized ones important. Postal and courier services that are at least medium-sized are important entities. Public transport is covered when it is identified as critical under the CER Directive. Check your scope →
Keep goods and people moving, and the evidence ready
Risks across terminals, fleets and systems
Rate risks by likelihood and impact for terminals, fleets, booking and tracking systems, link them to controls and treatment plans, and show supervisors how they are followed up.
Control the chain you depend on
Transport depends on IT providers, subcontractors and partners. Keep a supplier register, send security questionnaires and track the results as part of your NIS2 supply-chain measures.
One view across sites and countries
Give each terminal, subsidiary or country its own workspace while governance and reporting stay connected at group level.
BUILT FROM BELGIUM
What applies to transport in Belgium and the Netherlands
Belgian operators, from the port of Antwerp-Bruges to rail and logistics hubs, register with the CCB and can use CyFun® or ISO/IEC 27001. Dutch operators, including the port of Rotterdam community, register with the NCSC under the Cyberbeveiligingswet. Aviation organisations also follow the EU information security rules for aviation (Part-IS).
Secrato is built in Belgium and hosted in a Tier IV data centre in Antwerp. Start with the free supplier security questionnaire.
Common questions
Are ports and terminals in scope of NIS2?
Yes. Managing bodies of ports, entities operating works and equipment within ports, and vessel traffic services are part of the water transport subsector, a sector of high criticality, when they are at least medium-sized or designated.
Are logistics and courier companies in scope?
Postal and courier service providers that are at least medium-sized are important entities under Annex II. Freight carriers by air, rail, water or road may fall under the transport sector itself.
Is public transport covered by NIS2?
Public transport is covered when the Member State identifies the operator as a critical entity under the CER Directive. Check the national transposition and any designation letter.
How does Secrato help with supplier security?
Secrato includes a supplier register, a questionnaire library and supplier records linked to risks and controls, so your NIS2 supply-chain measures are documented and followed up.
See how Secrato supports NIS2 across your transport operations
Show us your sites, systems and suppliers, and we will map them to NIS2 in Secrato.
