NIS2 compliance guides and resources
NIS2 internal audit guide: 4-stage annual cycle, per-Article 21 evidence requests, audit fieldwork techniques, CAP format, and Art. 20 management review.
Already ISO 22301 certified? Here’s exactly what NIS2 Article 21(2)(c) still requires — and the 3-category gap checklist to close it without rebuilding your BCMS.
NIS2 gives HR two distinct obligations: personnel security controls and staff training. This guide maps both to each employment lifecycle stage HR owns.
Classify NIS2 suppliers in 4 tiers: full audits for Tier 1, standard clauses for Tier 4. Step-by-step method mapping CIR Annex 5 to supplier risk level.
Your next supplier contract either meets NIS2 Art. 21(2)(d) or it doesn’t. Use this 5-clause procurement checklist to close the gap before your next audit.
The CISO’s 6-phase NIS2 programme: Article 21 controls, board KPI templates, and a complete audit trail — from governance gap to audit-ready.
Article 21 mapped to your IT stack: MFA, SIEM, backup, and segmentation decisions explained — with an effort/impact matrix to sequence your NIS2 programme.
Most IR playbooks miss the Art. 23 clock — it starts at awareness, not confirmation. This guide shows how to embed the trigger inside Phase 2 so your team never scrambles.
Most NIS2 policies miss the disciplinary clause — and half fail the scope test. Here’s what each section must say to satisfy Article 21(2)(a).
No BIA = a BC Plan built on guesswork. Build yours in 5 steps: critical functions, dependencies, RTO/RPO/MTPD, and SPOFs — NIS2 Art. 21(2)(c) compliant.
