NIS2 compliance guides and resources
Microsoft Purview NIS2 compliance is narrower than it looks. See exactly which CIR Section 9.2 requirements it meets, and the 3 key-management gaps it leaves.
CyberArk NIS2 compliance: mapping PAM, EPM and the vault to CIR Annex 11.3 — and the four audit documents your PAM deployment still will not produce.
Rapid7 mapped to NIS2 Article 21(2) and the CIR 2024/2690 Annex, point by point: what Exposure Command, Incident Command, InsightVM and Vector Command evidence, and the four measures they cannot.
CIR Annex 9 has no ‘certificate management’ clause — here’s the real mapping from Vault PKI and Transit to Article 21(2)(h), plus a gap-analysis checklist.
Three VMware-to-NIS2 citations in circulation are wrong. See the corrected CIR 2024/2690 mapping for NSX-T, vSphere, and Aria Operations before your next audit.
ServiceNow IRM covers 6 of NIS2 Article 21’s 10 required measures — see the full module map and which 4 still need manual work before you sign a GRC quote.
Fortinet never says which product maps to which NIS2 Article 21(2) letter. We built the missing map — and caught 2 wrong CIR citations along the way.
Shield encrypts your Salesforce data. It doesn’t write your Article 21(2)(h) crypto policy. Here’s the exact CIR Annex gap – and how to close it.
No SAP vendor publishes this mapping: exactly which Article 21(2) measure GRC, ETD, and IAG satisfy — verified against CIR 2024/2690, gaps included.
CIR 6.6 does not set a patch deadline in days. See what it actually requires, and how Qualys TruRisk scoring maps to Annex 6.5 and 6.6.
