NIS2 enters into force in 2026. We automate 76% of technical Art.21 requirements and collect the rest via attestations. Total cost: SEK 15,000 instead of SEK 80,000.
Register interest →Art.21.2 lists ten minimum requirements that essential and important entities must implement. Here is how we cover them:
| Art.21.2 | Requirement | Security Guru |
|---|---|---|
| a) | Risk analysis + security policy | ⚙ Attestation |
| b) | Incident handling | ✓ Auditd rules, log forwarding, SIEM detection |
| c) | Backup + disaster recovery | ✓ Backup validation (not just existence — functionality) |
| d) | Supply chain | ✓ CVE in deps, GitHub Advisory, OSV mapping |
| e) | Network security + procurement | ✓ Segmentation, OT protocols, port exposure |
| f) | Vulnerability management | ✓ CVE matching, KEV, EPSS prioritisation |
| g) | Effectiveness measurement | ⚙ Attestation (KPI process) |
| h) | Cryptography + authentication | ✓ TLS config, DKIM/SPF, MFA gates, PKI |
| i) | HR security + access rights | ✓ AD RBAC, stale users, privileged accounts |
| j) | MFA + secure communications | ✓ MFA detection per service, S/MIME, end-to-end |
NIS2 introduces personal liability for management members. The board must:
Our Compliance module collects attestations for Art.20 and can produce a board pack for the next board meeting with the same traceability the auditor will require.
In the event of an incident with significant impact you must:
We cannot report on your behalf, but our scan report provides rapid root cause mapping that otherwise takes consultant hours.
Fill in the form — we'll get back to you within 24 hours.