Small and medium-sized enterprises (SMEs)

Under the European Union (EU) definition, SMEs are enterprises with fewer than 250 employees and at most 50 million euros turnover or 43 million euros balance sheet total. Size is decisive for Network and Information Security Directive 2 (NIS2): in many sectors medium-sized enterprises with 50 or more employees or 10 million euros turnover fall under the directive, smaller ones usually do not. Many mid-sized companies thus become regulated entities for the first time.