NIS2 Directive

Overview

NIS2 Directive (NIS2) — EU network and information security directive for essential and important entities. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

10 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate NIS2 compliance
• Security and compliance teams operating in European Union
• Customers and partners that require NIS2 assurance

Why it matters

NIS2 is a recognized security framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate NIS2 in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• Art. 21(1)

  Risk analysis and policies

  governance

• Art. 21(2)(a)

  Incident handling

  incident response

• Art. 21(2)(b)

  Business continuity

  business continuity

• Art. 21(2)(c)

  Supply chain security

  vendor management

• Art. 21(2)(d)

  Security in acquisition and development

  change management

• Art. 21(2)(e)

  Effectiveness assessment

  governance

Getting started

1. Open Framework Library and activate NIS2
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps