European Union
NIS2 Directive compliance, made simple
ComplianceDesk gives you 17 pre-built NIS2 Directive controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving NIS2 Directive compliance stops being a spreadsheet exercise.
Every NIS2 Directive control, organised for you
The real control library ComplianceDesk seeds the moment you activate NIS2 Directive — 17 controls across 4 categories.
Entity Classification & Scope
- NIS2-1.1 Essential or important entity classification determined
- NIS2-1.2 Applicable national transposing law and CSIRT identified
Governance & Management Accountability
- NIS2-2.1 Management body approves and oversees cybersecurity risk management measures
- NIS2-2.2 Management body completes cybersecurity risk-management training
Cybersecurity Risk Management Measures
- NIS2-3.1 Risk analysis and information security policy maintained
- NIS2-3.2 Incident handling procedures documented
- NIS2-3.3 Business continuity and crisis management plans maintained
- NIS2-3.4 Supply chain security assessed, including direct suppliers' own security practices
- NIS2-3.5 Security incorporated into system acquisition, development and maintenance
- NIS2-3.6 Effectiveness of risk-management measures assessed
- NIS2-3.7 Basic cyber hygiene practices and staff cybersecurity training provided
- NIS2-3.8 Cryptography and encryption policies applied
- NIS2-3.9 Human resources security, access control and asset management maintained
- NIS2-3.10 Multi-factor authentication and secure communications used where appropriate
Incident Reporting & Supervision
- NIS2-4.1 Early warning submitted within 24 hours of becoming aware of a significant incident
- NIS2-4.2 Incident notification submitted within 72 hours
- NIS2-4.3 Final report submitted within one month
Frequently asked questions
How many controls does ComplianceDesk track for NIS2 Directive?
17, organised into 4 categories, ready to assign to an owner as soon as you activate the framework.
Can I track NIS2 Directive alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up NIS2 Directive in ComplianceDesk?
Activating NIS2 Directive instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other European Union frameworks
See your full compliance picture
131 frameworks, one system of record.