The definitive Article 21 guide: every CIR 2024/2690 Annex section mapped to its Article 21(2) letter, verbatim sub-requirements, proportionality criteria, and a 10-row audit evidence checklist.
Parliament and courts are exempt from NIS2. Most ministries are not. See the Article 2(7) exclusion mechanics and what Article 21 requires for those in scope.
Discover exactly which EASA Part-IS and IMO MSC-FAL.1 controls satisfy NIS2 Article 21(2) — and the 3 gaps aviation and maritime transport operators must still close.
NIS2 vs DORA: six Article 2(3) exclusion categories, what NIS2 obligations survive for DORA-covered banks, and how the 4-hour vs 24-hour notification conflict resolves.
Healthcare NIS2 compliance has three hidden gaps: IoMT inventory, MDR dual obligations, and patient data encryption tiers. This checklist closes all three.
NIS2 Article 21 checklist for energy operators: ENTSO-E NCCS dual-framework mapping, OT asset inventory template for substation RTUs and SCADA, and IT/OT zone architecture checklist for grid operators, gas TSOs, and renewables.
Online marketplace, search engine, or social network? Check NIS2 scope, Article 21 obligations, and the API access control gap most platforms miss.
Four NIS2 compliance gaps CIR auditors check first in MSSP operations: detection evidence, key lifecycle, SOC training records, and incident playbook structure.
Which ICT managed services fall under NIS2 Annex I? Scope checklist, 8 CIR contract clauses, multi-CSIRT incident response, and Article 21 controls for MSPs.
Two NIS2 legal tracks apply to the research sector. This checklist identifies which route covers your institution and what Article 21(2) obligations follow.
