REGULATION
NIS2
An EU directive setting cybersecurity risk-management and incident-reporting duties for covered entities.
DEFINITION
NIS2 definition
NIS2 is a European Union directive that sets cybersecurity risk-management, governance and incident-reporting duties for covered essential and important entities. National law determines the exact duties and enforcement route in each member state. The legal obligations belong to the client; Cinderpath builds and operates technical controls that can support compliance work.
WHY IT MATTERS NOW
The current operating pressure
Regulatory fact, European Commission: EU member states were required to transpose NIS2 into national law by 17 October 2024. Covered organisations now need to map local requirements to identity, incident, supplier and evidence controls.
WHAT WE DO ABOUT IT
Work connected to NIS2
Access and identity
Identity, least privilege, secrets handling, and the end of shared accounts.
NIS2 and DORA readiness
A gap assessment and a technical plan against NIS2, DORA and the EU AI Act. The obligations stay yours, the controls are ours to build.
Monitoring and on call
The difference between monitoring and alerting, plus a rota that names an owner.
NEIGHBOURING TAGS
Shared parts of the map
Edge width follows the number of shared nodes
NIS2 at the centre, 5 neighbouring tags around it: Observability (1 shared node), EU AI Act (1 shared node), DORA (1 shared node), GDPR (1 shared node) and Fintech (1 shared node).
- Observability
1 shared node
- EU AI Act
1 shared node
- DORA
1 shared node
- GDPR
1 shared node
- Fintech
1 shared node
Trace the shared concern through your systems
Bring the system boundary and the decisions that need evidence. We will identify the connected work and define a practical starting point.