NIS2
Essential and important entities must manage the risks to their network and information systems. xSpctr gives you the asset inventory, vulnerability handling and evidence that the measures call for.
Mapping
xSpctr supports these requirements with evidence; it does not make you compliant on its own.
| Requirement | How xSpctr helps |
|---|---|
| Art. 21(2)(a) Risk analysis and security policies | A current inventory of what you expose, and a ranked view of the risks on it. |
| Art. 21(2)(e) Vulnerability handling and disclosure | Possible CVEs, known-exploited matches and a tracked workflow from finding to fix. |
| Art. 21(2)(f) Assessing the effectiveness of measures | Trends, time to remediate and dated audit evidence for any period. |
| Art. 21(2)(h) Cryptography and encryption | Certificate, TLS and email security checks on every domain. |
| Art. 21(2)(i) Asset management | Daily discovery of domains, hosts, services and certificates. |
| Art. 23 Reporting obligations | Procedures and incident reporting kept together in the NIS2 module. |
In practice
Each Article 21 measure with what the platform covers and what remains yours.
Dated reports of what was checked, found and fixed.
Summary reports that management bodies can actually read and approve.
Tell us about your organisation and we will set you up.