NIS 2 baseline measures

NIS2 Point of Contact and CSIRT Contact Role: Accountability and Operating Duties

NIS2 implementation guidance distinguishes the legal Point of Contact from the operational CSIRT contact role. Practical guide to role formalization,…

NIS2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements

NIS2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle monit…

NIS2 Compliance Documentation Audit: How the Scoring Methodology Works

Aegister’s scoring methodology evaluates NIS2 documents at requirement-point level across 5 dimensions on a 0-4 scale. This guide covers the scoring …

NIS2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof

ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin…

NIS2 Significant Incident IS-3: Violation of Expected Service Levels

IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s…

Compliance Documentation Audit for NIS2 Baseline Obligations: Method Overview

A Compliance Documentation Audit maps NIS2 documents to baseline requirements, scores maturity on a 0-4 scale, verifies evidence traceability, and ch…

NIS2 Significant Incident IS-2: Integrity Loss Affecting Digital Data

IS-2 in the ACN baseline model covers integrity loss affecting digital data under entity ownership or control. Practical guide to qualification, evid…

NIS2 baseline deadline October 2026: 8-month implementation roadmap

With the NIS2 baseline adoption deadline set for October 2026, organizations have roughly 8 months left. This guide provides a compressed, phased roa…

NIS2 KPIs and continuous improvement: operational metrics for resilient compliance

ACN guidance frames improvement as a continuous phase across the full incident lifecycle. This guide provides a practical KPI framework, governance r…

NIS2 Significant Incident IS-1: Confidentiality Loss Affecting Digital Data

IS-1 in the ACN baseline model covers confidentiality loss affecting digital data under entity ownership or control. Practical guide to qualification…

Common NIS2 compliance mistakes: practical gaps that delay baseline readiness

Most NIS2 delays are operational: missing evidence, unclear ownership, untested notification workflows, and late governance decisions. A practical gu…

NIS2 Incident Typology Model: Condition, Compromise, and Affected Object

ACN baseline guidance classifies significant incidents through condition, compromise, and object of compromise. Practical guide to using the typology…

NIS2 operational registers for logs, backups, and recovery: practical guide to auditable evidence

NIS2 baseline requires operational evidence beyond policies. This guide covers how to build auditable registers for logs, backups, restore tests, and…

NIS2 Recovery Controls (RC): Operational Resilience and Service Restoration

The NIS2 Recovery (RC) domain defines how entities restore operations after incidents and sustain resilience. Practical guide to restoration procedur…

NIS2 crisis management plan: practical guide for an approvable ID.IM-04 document

The crisis management plan is mandatory under NIS2 Appendix C (ID.IM-04). This guide covers what an approvable plan must contain, a practical templat…

NIS2 Response Controls (RS): Containment and Eradication in Incident Handling

Containment and eradication are iterative response steps that limit damage and remove attacker persistence. Practical guide to strategy selection, ev…

NIS2 disaster recovery plan: practical guide for an approvable ID.IM-04 document

The disaster recovery plan is mandatory under NIS2 Appendix C (ID.IM-04). This guide covers what an approvable DR plan must contain, a practical temp…

NIS2 Response Controls (RS): Signaling and Investigation Operating Model

The NIS2 Response (RS) domain requires structured incident response through signaling, investigation, and iterative decision loops. Practical guide t…

NIS2 business continuity plan: practical guide to build an approvable ID.IM-04 document

The business continuity plan is mandatory under NIS2 Appendix C (ID.IM-04). This guide covers what an approvable plan must include, a practical templ…

NIS2 Detection Controls (DE): Event Monitoring and Adversarial Signal Handling

The NIS2 Detection (DE) domain requires monitoring networks, services, and endpoints to identify adverse events early. Practical guide to log readine…