Framework library · European Union

NIS2

NIS2 Directive — Network & Information Security. Published by European Parliament & Council, version Directive (EU) 2022/2555. Kapālins maps it to 4 controls. 3 of 4 controls are proved by a live signal from the platform, and 1 by the assessment.

Read the source document

Controls mapped
NIS2-GOVManagement-body governance & accountabilityAssessment
NIS2-INCIDENTSignificant-incident reporting (24h / 72h)Live signal
NIS2-RMCyber risk-management measuresLive signal
NIS2-SUPPLYSupply-chain securityLive signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How NIS2 got here.

  1. Proposed

    The Commission proposed a revised Network and Information Security Directive (NIS2). European Commission

  2. Adopted

    Directive (EU) 2022/2555 adopted; published in the Official Journal on 27 December 2022. EUR-Lex

  3. In force

    NIS2 entered into force. EUR-Lex

  4. In force

    Member States’ NIS2 measures apply and NIS1 is repealed; transposition was due 17 October 2024. EUR-Lex

  5. Proposed

    The Commission proposed targeted amendments to NIS2 as part of a new cybersecurity package. European Commission

See this framework on your estateAll 29 frameworks