NIS2 compliance guides and resources
CyberArk NIS2 compliance: mapping PAM, EPM and the vault to CIR Annex 11.3 — and the four audit documents your PAM deployment still will not produce.
Rapid7 mapped to NIS2 Article 21(2) and the CIR 2024/2690 Annex, point by point: what Exposure Command, Incident Command, InsightVM and Vector Command evidence, and the four measures they cannot.
CIR Annex 9 has no ‘certificate management’ clause — here’s the real mapping from Vault PKI and Transit to Article 21(2)(h), plus a gap-analysis checklist.
Three VMware-to-NIS2 citations in circulation are wrong. See the corrected CIR 2024/2690 mapping for NSX-T, vSphere, and Aria Operations before your next audit.
ServiceNow IRM covers 6 of NIS2 Article 21’s 10 required measures — see the full module map and which 4 still need manual work before you sign a GRC quote.
Fortinet never says which product maps to which NIS2 Article 21(2) letter. We built the missing map — and caught 2 wrong CIR citations along the way.
Shield encrypts your Salesforce data. It doesn’t write your Article 21(2)(h) crypto policy. Here’s the exact CIR Annex gap – and how to close it.
No SAP vendor publishes this mapping: exactly which Article 21(2) measure GRC, ETD, and IAG satisfy — verified against CIR 2024/2690, gaps included.
CIR 6.6 does not set a patch deadline in days. See what it actually requires, and how Qualys TruRisk scoring maps to Annex 6.5 and 6.6.
Tenable finds vulnerabilities. NIS2 still needs the paper trail. What CIR 6.5/6.6 and Lumin’s exposure score do — and don’t — prove to an auditor.
