Compliance · NIS2
NIS2: manage the risk, and report what happened.
NIS2 asks essential and important entities to manage cyber risk and report significant incidents. National laws set the final detail. GuardStance supports these measures with technical controls.
Book a demoWhich measures does GuardStance support?
| Requirement | What it asks | How GuardStance supports it |
|---|---|---|
| Art. 21(2)(a) | Policies on risk analysis and information system security. | Discovery shows where sensitive data sits and who can reach it, to feed your risk analysis. |
| Art. 21(2)(b) | Incident handling. | Cases with timelines, owners and evidence. |
| Art. 21(2)(i) | Human resources security, access control policies and asset management. | An inventory of data assets, and policies by user and group. |
| Art. 23 | Report significant incidents: an early warning in 24 hours and a notification in 72. | Case timelines show what moved, when and where, to support the report. |
GuardStance supports these requirements with technical controls. This is not legal advice; confirm legal questions with your counsel.