EU Regulation

NIS2 Compliance Checker™

Assess your NIS2 directive compliance across 5 key dimensions. Identify your gaps and prioritize your compliance actions.

Deadline: October 17, 2024 - Fines up to 10M EUR or 2% revenue
5
Dimensions
17
Criteria
5
Levels

Governance

Executive involvement in cybersecurity

50
NoneInformalDocumentedActiveEngaged

Existence and update of ISS policies

50
AbsentBasicFormalizedReviewedAudited

Cybersecurity training for leadership

50
NoneAwarenessTrainingCertifiedContinuous

Risk Management

Cyber risk analysis methodology

50
AbsentAd-hocAnnualContinuousReal-time

Risk treatment plan and monitoring

50
NonePartialDocumentedMonitoredOptimized

Frequency of analysis updates

50
NeverAnnualSemi-annualQuarterlyMonthly

Security Measures

Identity and access management (IAM)

50
BasicPasswordsPartial MFAFull MFAZero Trust

Encryption of sensitive data

50
NoneTransitAt restE2EQuantum-safe

Network segmentation and protection

50
FlatFirewallSegmentedMicro-segSASE

Backup and recovery strategy

50
NoneManualAutomatic3-2-1Immutable

Incident Management

Incident detection capability

50
NoneLogsSIEMSOC24/7

Incident response plan and team

50
NoneInformalDocumentedTestedBattle-tested

Notification process (24h/72h)

50
UnknownKnownDocumentedTestedAutomated

BCP/DRP and restoration tests

50
NoneDocumentedPartialTestedProven

Supply Chain

Critical supplier mapping

50
NonePartialCompleteClassifiedDynamic

Cyber due diligence of suppliers

50
NoneQuestionnaireAuditContinuousReal-time

Security requirements in contracts

50
NoneBasicStandardStrictNIS2