EU directive
NIS 2
Cyber resilience, required.
NIS 2 brings EU cybersecurity rules to thousands of medium and large companies across 18 sectors. Genroks shows whether you're in scope, and gets you compliant.
18
sectors in scope
24 hours
to send an early warning of a significant incident
2%
of global turnover, or €10M, maximum fine
Personal
accountability for management
Under NIS 2, cybersecurity is a board-level responsibility. Management must approve the measures, oversee them and be trained. Genroks gives them the evidence.
What it asks for
Every requirement, in plain language.
- Risk management
- Policies for risk analysis and information system security.
- Incident handling and reporting
- Early warning in 24 hours, notification in 72, final report in a month.
- Business continuity
- Backups, disaster recovery and crisis management.
- Supply chain security
- Security requirements for suppliers and service providers.
- Secure development
- Acquisition, development, maintenance and vulnerability handling.
- Access, MFA and encryption
- Access control, multi-factor authentication and cryptography.
- Training and cyber hygiene
- Basic practices and training, including for management.
With Genroks
From first question to NIS 2, in four steps.
Step 1
Check scope
Find out whether you're an essential or important entity, or out of scope.
You getYour entity classificationStep 2
Assess
Measure yourself against the Article 21 measures, in plain language.
You getArticle 21 gap reportStep 3
Implement
Close gaps with guided tasks, policies and an incident reporting process.
You getIncident reporting processStep 4
Stay ready
Monitoring, reminders and management reporting keep you compliant.
You getManagement reports
One platform, four frameworks. Most of the work overlaps, so nothing is done twice.
International certification
ISO 27001
The security certification enterprise clients and tenders ask for.
Explore ISO 27001Attestation report
SOC 2
The security report US customers expect from their vendors.
Explore SOC 2EU regulation
GDPR
The EU law for any company that handles personal data of people in the EU.
Explore GDPR
Questions, answered.
Generally, medium and large companies in the 18 covered sectors are, and some smaller ones regardless of size. Each EU country sets the details in national law. Genroks walks you through the check.
Get ready for NIS 2.
Book a demo and see exactly where you stand on NIS 2 today, and what Genroks builds for you from there.