NIS2 Compliance
for Essential and Important Entities
NIS2 raises cybersecurity expectations across 17 sectors in the EU, with explicit management accountability, stricter incident reporting and strong supply chain requirements.
Basenorm centralises the full NIS2 programme: governance, risk management, incident handling, business continuity, supplier oversight and management training, with controls mapped to the Unified Control Library.
Scope, Governance and Management Accountability
Determine if your organisation is an essential or important entity, implement board-level accountability and document governance aligned with NIS2 Article 20.
- Essential and important entity classification
- Board-level cybersecurity accountability
- NIS2 governance documented in one place
- Roles, responsibilities and sign-off workflows
- Management training and awareness tracking
Article 21 Security Measures
NIS2Entity Classification
Up to €10M or 2% fine
Up to €7M or 1.4% fine
Risk Management Measures and Incident Reporting
Implement the 10 minimum cybersecurity risk management measures in Article 21 and operate a 24-hour / 72-hour / one-month incident reporting workflow.
- Article 21 risk management measures fully mapped
- Policies on risk analysis and information security
- Incident handling and business continuity
- Cryptography, access control and human resources security
- Significant incident reporting within 24h / 72h / 1 month
Supply Chain Security and Continuous Assurance
Manage direct suppliers and service providers, run supplier risk assessments and demonstrate continuous assurance to competent authorities.
- Supplier inventory and criticality classification
- NIS2 supply chain security requirements
- Contractual security requirements and monitoring
- Continuous evidence collection and readiness scoring
- Governance Graph linkage across services, assets and suppliers
Incident Reporting Timeline
Initial alert to CSIRT
Detailed incident report
Root cause & lessons
Ready to operationalise NIS2?
Join essential and important entities using Basenorm to manage NIS2 across governance, risk management, incident reporting and supply chain security.
Frequently Asked Questions
Key questions about NIS2 scope, requirements and Basenorm support.