Key point · Article 28
Determination of compliance level
For essential and important entities, the sector, size and risk matrix determine a Basic, Substantial or High level.
Start without complicating
Four practical actions.
- 01
Confirm sector, subsector and dimension
- 02
Store the notified decision
- 03
Identify the most demanding level when there are several
- 04
Link the level to the cumulative measures in Annex III
Proof
Which should be recorded.
- Sector and dimension data
- Notification of qualification
- Level and scope applicable
- Cumulative matrix of measures and evidence
Warning
Avoid common mistakes.
- Do not choose the level by self-assessment.
- Not only apply the exclusive measures of the indicated level.
- Do not confuse minimum measures with full risk management.
Frequently Asked Questions
Two straight answers.
What are the possible levels?
Basic, Substantial and High.
What if there's more than one level?
The most demanding level is applied to manage risks in the High, Substantial and Basic order.
Primary source
Regulation No. 756/2026 of 22 June
Information guide. Confirm the official text, notifications received and published technical instructions for the specific case.