Get audit-ready for NIS2
NIS2 Directive (EU 2022/2555) · Network and Information Security
EU directive establishing a high common level of cybersecurity across the Union, replacing the original NIS Directive with expanded scope and stricter requirements for essential and important entities.
NIS2What is NIS2?
EU directive establishing a high common level of cybersecurity across the Union, replacing the original NIS Directive with expanded scope and stricter requirements for essential and important entities.
Who it applies to
Essential and important entities across listed sectors, including digital infrastructure and ICT service management. Management bodies can be held personally accountable, which is unusual and worth knowing.
How the standard is organised
Risk-management measures and incident reporting duties. Being a Directive rather than a Regulation, it takes effect through each member state's national law - so the detail differs by country in a way DORA's does not.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
NIS2 on the Bitkosh platform
The 12 NIS2 controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- MES-012Secured communications
Secured voice, video and text communications and secured emergency communications (Art. 21.2(j)).
Network Security - MES-008Cyber hygiene and security training
Basic cyber hygiene practices and cybersecurity training (Art. 21.2(g)).
Cyber Hygiene & Training - MES-003Business continuity and crisis management
Business continuity, backup management, disaster recovery and crisis management (Art. 21.2(c)).
Business Continuity - MES-007Effectiveness assessment of cyber risk measures
Policies and procedures to assess the effectiveness of cybersecurity risk-management measures (Art. 21.2(f)).
Risk Analysis & Policies - MES-005Security in acquisition, development and maintenance
Security in network and information systems acquisition, development and maintenance (Art. 21.2(e)).
Network Security - MES-004Supply chain security
Security in the supply chain, including supplier and provider relationships (Art. 21.2(d)).
Supply Chain Security
More financial & operational resilience frameworks
Frequently Asked Questions
Who publishes NIS2, and who does it apply to?
How is NIS2 conformance demonstrated?
How is NIS2 structured?
Ready to get audit-ready for NIS2?
See how the Bitkosh Readiness Platform gets you audit-ready for NIS2 — and the other 47 ready frameworks — from a single control library.