NIS2 security module

Entexia includes a NIS2 security module with risk management, security policies, access control and audit trail built into the platform at no extra charge. The module covers the key requirements of Directive (EU) 2022/2555 - risk management, security incidents, supply chain security, business continuity and audit trail.

NIS2 (EU Directive 2022/2555 on measures for a high common level of cybersecurity) replaced NIS1 and applies from October 2024. It covers essential and important entities in 18 sectors: energy, transport, health, public administration, digital infrastructure, food, chemicals, manufacturing and services. Violations carry fines of up to €10 million or 2% of annual turnover.

The NIS2 module in Entexia includes: (1) risk register with likelihood and impact assessment; (2) security policy library with version management and employee signatures; (3) cybersecurity incident register with ENISA classification; (4) supplier register with security assessment (vendor risk); (5) MFA access management; (6) audit trail of all critical actions; (7) backup policy settings in line with NIS2 requirements.

NIS2 requires reporting of serious incidents to the competent authority within 24 hours (early warning) and 72 hours (interim report), and a month after the incident (final report). The Entexia NIS2 module contains an incident register with built-in timelines and reminders for each deadline. Reports are generated from the register in standardised format.

Yes. NIS2 Article 21(2)(d) requires supply chain security management. The Entexia NIS2 module includes a supplier register with security assessment, risk classification (A/B/C) and deadlines for regular assessments. Every supplier with access to your systems or data is recorded with a risk level and last assessment date.

Yes. The NIS2 security module is part of the Entexia platform at no extra charge or separate licence. A GDPR module with processing records and subject access requests (SAR) is also built in. For businesses that need to demonstrate compliance with both directives, everything is in one system.