Guide

Already using NIST CSF 2.0? You’ve covered ~70% of NIS2 Article 21 — this mapping shows the three gaps that remain and what to build first.

NIS2 internal audit guide: 4-stage annual cycle, per-Article 21 evidence requests, audit fieldwork techniques, CAP format, and Art. 20 management review.

Already ISO 22301 certified? Here’s exactly what NIS2 Article 21(2)(c) still requires — and the 3-category gap checklist to close it without rebuilding your BCMS.

NIS2 gives HR two distinct obligations: personnel security controls and staff training. This guide maps both to each employment lifecycle stage HR owns.

Classify NIS2 suppliers in 4 tiers: full audits for Tier 1, standard clauses for Tier 4. Step-by-step method mapping CIR Annex 5 to supplier risk level.

Your next supplier contract either meets NIS2 Art. 21(2)(d) or it doesn’t. Use this 5-clause procurement checklist to close the gap before your next audit.

The CISO’s 6-phase NIS2 programme: Article 21 controls, board KPI templates, and a complete audit trail — from governance gap to audit-ready.

Article 21 mapped to your IT stack: MFA, SIEM, backup, and segmentation decisions explained — with an effort/impact matrix to sequence your NIS2 programme.

Most IR playbooks miss the Art. 23 clock — it starts at awareness, not confirmation. This guide shows how to embed the trigger inside Phase 2 so your team never scrambles.

Most NIS2 policies miss the disciplinary clause — and half fail the scope test. Here’s what each section must say to satisfy Article 21(2)(a).