NIS2 compliance guides and resources
How CIR 2024/2690 Section 6.7.2(l) maps to DNSSEC, TSIG zone transfer controls, and resolver hardening for DNS operators and TLD registries under NIS2.
EECC-compliant telecoms still face 7 NIS2 Art. 21 gaps. See which EECC controls carry forward and what to build before your first ex-ante audit.
Six financial entity types DORA excludes still face NIS2 Article 21. This checklist maps each to its obligations, evidence needs, and penalty exposure.
Manufacturing in NIS2 Annex II? The 10 Article 21 measures mapped to OT reality — plus the board liability clause most compliance teams miss.
CIR 2024/2690 imposes 150+ binding controls on DNS, TLD, CDN, and data centre operators under NIS2. IXPs face Article 21 only. Full compliance matrix and June 2026 audit deadline inside.
Most auditors check your Section 13 Physical & Environmental Security Policy first. Learn what CIR 2024/2690 actually requires — perimeter layers, CCTV retention, UPS testing, and the cooling failure that becomes a 72-hour incident report.
CIR Title 5 supply chain audits for space operators: how to structure satellite firmware SBOMs, navigate ITAR/EAR audit right restrictions, and document COTS procurement risk before your first NIS2 inspection.
CIR Annex §6.7 is the operative NIS2 provision for IXP BGP security — not §6.4. Learn how route leaks and BGP hijacks trigger Art.23 differently, and how MANRS closes the compliance gap.
How EU 5G Toolbox high-risk vendor designations create specific NIS2 Article 21(2)(d) obligations for telecom operators — covering RAN, core network, OSS/BSS supplier tiers, contractual clauses, and the CSA2 phase-out timeline.
Government shared IT services are NIS2 Article 21(2)(d) direct suppliers — most compliance programmes haven’t assessed them. This guide fills the gap.
