Entexia™Intelligent ecosystem
+386 41 916 912
Security & compliance · EU 2022/2555

NIS2 security module

Entexia includes a NIS2 security module with risk management, security policies, access control and audit trail for compliance with EU Directive 2022/2555.

Built into every Entexia subscription at no extra charge. Together with the GDPR module for comprehensive legal compliance.

Free demo Security architecture

NIS2 applies from October 2024 - fines up to €10m

Directive 2022/2555 (NIS2) was transposed into Slovenian law through ZVKSES. Violations: up to €10 million or 2% of annual turnover for essential entities, up to €7 million or 1.4% for important entities.

Covered sectors (selection)

Energy (electricity, gas, oil, district heating)
Transport (air, rail, road, waterborne)
Banking and financial market infrastructure
Healthcare and pharmaceuticals
Digital infrastructure and ICT services
Public administration
Food industry (medium/large companies)
Manufacturing (medical devices, chemicals, vehicles)
Waste management

What the NIS2 module in Entexia includes

We cover Article 21 of the NIS2 Directive - cybersecurity risk management measures.

Risk register

Record all risks with likelihood, impact and owner assessment. Periodic review with reminders.

Security policies with signatures

Policy library with version management. Employees confirm policies digitally - evidence for audit.

Incident register

Record cybersecurity incidents with ENISA classification. Built-in timeline for NIS2 reports (24h/72h/1M).

Vendor risk (supply chain)

Record suppliers with access to your systems. A/B/C risk assessment and deadline for re-evaluation.

Access management and MFA

Overview of active accesses, roles and permissions. MFA supported for all administrative accesses.

Audit trail of critical actions

Every data change, access and export is recorded with a timestamp and user identity.

Article 21 NIS2 coverage

Article 21(2) NIS2 mandates 10 groups of measures. Entexia directly supports 7 of 10.

21(2)(a): Risk analysis and IT security policies
21(2)(b): Incident handling - records and reporting
21(2)(c): Business continuity and backups
21(2)(d): Supply chain security (vendor risk)
21(2)(e): Network and system security (access, MFA)
21(2)(i): Cryptography - encrypted data at rest
21(2)(j): Human resources security - policies and signatures
21(2)(f): Effectiveness assessment (penetration testing)(external provider)
21(2)(g): Cyber hygiene and training(external provider)
21(2)(h): Company-wide MFA policies(external provider)

Frequently asked questions about NIS2

Kateri ERP ima NIS2 varnostni modul?▾

Entexia vsebuje NIS2 varnostni modul z upravljanjem tveganj, varnostnimi politikami, nadzorom dostopa in revizijsko sledjo, vgrajen v platformo brez doplačila. Modul pokriva ključne zahteve Direktive (EU) 2022/2555 - upravljanje tveganj, varnostni incidenti, varnost dobavne verige, poslovna kontinuiteta in revizijska sled.

Kaj je NIS2 direktiva in komu velja?▾

NIS2 (Direktiva EU 2022/2555 o ukrepih za visoko skupno raven kibernetske varnosti) je nadomestila NIS1 in velja od oktobra 2024. Zajema bistvene in pomembne subjekte v 18 sektorjih: energija, transport, zdravstvo, javna uprava, digitalna infrastruktura, prehrambna industrija, kemikalije, proizvodnjo in storitve. V Sloveniji jo je prenesel ZVKSES. Kršitve nosijo globe do 10 milijonov € ali 2 % letnega prometa.

Kaj konkretno vključuje NIS2 varnostni modul v Entexia?▾

NIS2 modul v Entexia vključuje: (1) register tveganj z oceno verjetnosti in vpliva; (2) knjižnico varnostnih politik z upravljanjem verzij in podpisi zaposlenih; (3) register kibernetskih incidentov z ENISA klasifikacijo; (4) evidenco dobaviteljev z varnostno oceno (vendor risk); (5) upravljanje MFA dostopov; (6) revizijsko sled vseh kritičnih dejanj; (7) nastavitve politike varnostnih kopij skladno z NIS2 zahtevami.

Kako Entexia pomaga pri NIS2 porocanju incidentov?▾

NIS2 zahteva porocanje resnih incidentov pristojnemu organu (SI-CERT za Slovenijo) v 24 urah (zgodnje opozorilo) in 72 urah (vmesno porocilo) ter mesec dni po incidentu (zakljucno porocilo). Entexia NIS2 modul vsebuje register incidentov z vgrajenimi casovnicami in opomniki za vsak rok. Porocila se generirajo iz registra v standardiziranem formatu.

Ali NIS2 modul pokriva tudi varnost dobavne verige?▾

Da. NIS2 clan 21(2)(d) zahteva upravljanje varnosti v verigi dobave. Entexia NIS2 modul vkljucuje evidenco dobaviteljev z varnostno oceno, klasifikacijo tveganja (A/B/C) in roky za redne ocene. Vsak dobavitelj, ki ima dostop do vaših sistemov ali podatkov, se evidentira s stopnjo tveganja in datum zadnje ocene.

Ali je NIS2 modul vkljucen v osnovno narocnino Entexia?▾

Da. NIS2 varnostni modul je del Entexia platforme brez doplačila ali ločene licence. Prav tako je vgrajen GDPR modul z evidenco obdelav in zahtevami za dostop (SAR). Za podjetja, ki morajo izkazati skladnost z obema direktivama, je vse v enem sistemu.

Related modules

Entexia security architecture GDPR module Audit log Compare with Minimax

NIS2 compliance with Entexia - at no extra charge

The free demo includes a demonstration of the NIS2 module and GDPR register.

Request a demo