NIS2 compliance guides and resources
ISO 27019 certification covers 5 of NIS2’s 10 Article 21 measures for energy OT. See which 4 obligations it leaves open — and the fastest route to closing them.
HIPAA won’t cover your EU entities’ NIS2 obligations. Learn the 3 control gaps — MFA, notification timing, supply chain — and close each one before an audit.
The definitive Article 21 guide: every CIR 2024/2690 Annex section mapped to its Article 21(2) letter, verbatim sub-requirements, proportionality criteria, and a 10-row audit evidence checklist.
Parliament and courts are exempt from NIS2. Most ministries are not. See the Article 2(7) exclusion mechanics and what Article 21 requires for those in scope.
Discover exactly which EASA Part-IS and IMO MSC-FAL.1 controls satisfy NIS2 Article 21(2) — and the 3 gaps aviation and maritime transport operators must still close.
NIS2 vs DORA: six Article 2(3) exclusion categories, what NIS2 obligations survive for DORA-covered banks, and how the 4-hour vs 24-hour notification conflict resolves.
Healthcare NIS2 compliance has three hidden gaps: IoMT inventory, MDR dual obligations, and patient data encryption tiers. This checklist closes all three.
NIS2 Article 21 checklist for energy operators: ENTSO-E NCCS dual-framework mapping, OT asset inventory template for substation RTUs and SCADA, and IT/OT zone architecture checklist for grid operators, gas TSOs, and renewables.
Online marketplace, search engine, or social network? Check NIS2 scope, Article 21 obligations, and the API access control gap most platforms miss.
Four NIS2 compliance gaps CIR auditors check first in MSSP operations: detection evidence, key lifecycle, SOC training records, and incident playbook structure.
