EU NIS2 Directive: every control, and what you already have

11 controls 1 frameworks share controls with it European Union held in the corpus

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
FAA Aircraft Systems Information Security Protection (ASISP)	3	measure it →

Every control

Code	Control	Also in
`NIS2-TRN-Art20`	Management body responsibilities and training (NIS2 Article 20)	0
`NIS2-TRN-Art21(2)`	Cybersecurity risk-management measures (NIS2 Article 21(2)(a)-(j))	1
`NIS2-TRN-Art22`	Coordinated risk assessments of critical supply chains (NIS2 Article 22)	1
`NIS2-TRN-Art23`	Incident reporting obligations - 24h early warning + 72h notification + 1-month final report (NIS2 Article 23)	1
`NIS2-TRN-Art24`	Use of European cybersecurity certification schemes (NIS2 Article 24)	0
`NIS2-TRN-Art27`	Registration of essential and important entities (NIS2 Article 27)	0
`NIS2-TRN-Art31_32_33`	Supervisory measures for essential entities (NIS2 Articles 31-33)	0
`NIS2-TRN-Art34`	Administrative fines (NIS2 Article 34) - up to EUR 10M or 2% of turnover	0
`NIS2-TRN-Scope`	Sectoral scope - Annex I Sector 5 Transport (NIS2 Article 2 + Annex I)	0
`NIS2-TRN-Sectoral-Coordination`	Sectoral lex specialis coordination - air / rail / water / road (NIS2 Article 4 + Article 12)	0
`NIS2-TRN-Status`	Sectoral application view status (this corpus node)	0

Tell me when EU NIS2 Directive files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for EU NIS2 Directive, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition