Get ready for NIS2 — without the complexity
The NIS2 Directive requires EU organizations to implement cybersecurity risk management measures. VigilPrism helps you understand where you stand and track your progress toward compliance.
What is NIS2?
The Directive
NIS2 (Network and Information Security Directive 2) is EU legislation that sets cybersecurity requirements for essential and important entities. It came into force in January 2023 and must be implemented by EU member states by October 2024.
Who's affected?
Organizations in critical sectors (energy, transport, health, digital infrastructure) and important sectors (manufacturing, food, chemicals, digital services) with 50+ employees or €10M+ turnover.
Key requirements
Risk management measures, incident reporting within 24-72 hours, supply chain security, business continuity, and basic cyber hygiene. Management can be held personally liable.
Penalties
Essential entities: up to €10M or 2% of global turnover. Important entities: up to €7M or 1.4% of global turnover. Personal liability for management in case of non-compliance.
How VigilPrism helps with NIS2 requirements
VigilPrism maps directly to NIS2 Article 21 requirements, helping you demonstrate compliance with continuous monitoring and audit-ready documentation.
Risk management measures
Organizations must implement appropriate technical and organizational measures to manage security risks.
How VigilPrism helps:
- Continuous risk scanning identifies security gaps across your environment
- CIS Benchmarks verify system configurations meet security standards
- Risk-based prioritization helps focus on what matters most
- Remediation tracking ensures issues are addressed systematically
Policies on risk analysis and information system security
Documented policies for analyzing risks and securing information systems.
How VigilPrism helps:
- Compliance dashboards show your security posture at a glance
- Audit-ready reports document your security status
- Historical trends demonstrate continuous improvement
- Evidence collection supports policy compliance verification
Incident handling
Procedures for detecting, responding to, and recovering from incidents.
How VigilPrism helps:
- Issue lifecycle management tracks problems from detection to resolution
- Full audit trail documents how incidents were handled
- Integration with ticketing systems (Jira, ServiceNow) for incident workflows
- Automatic issue closure when problems are verified fixed
Supply chain security
Security in the acquisition, development, and maintenance of systems.
How VigilPrism helps:
- Software inventory across all systems
- Risk detection for third-party software packages
- KEV (Known Exploited Vulnerabilities) prioritization
- Track which software needs updates across your environment
Security in network and information systems
Security in acquisition, development, and maintenance of network and information systems.
How VigilPrism helps:
- Network configuration auditing
- Firewall rule analysis
- Service and port security checks
- Multi-platform coverage (Windows, Linux, macOS)
Basic cyber hygiene practices
Cybersecurity training and basic cyber hygiene practices.
How VigilPrism helps:
- Password policy enforcement checks
- Authentication configuration auditing
- Security best practice verification (CIS Benchmarks)
- Clear remediation guidance for identified issues
Access control and asset management
Human resources security, access control policies, and asset management.
How VigilPrism helps:
- Complete system inventory across your organization
- User and permission auditing
- SSH and remote access configuration checks
- Group-based organization for asset management
Reporting obligations
Significant incidents must be reported to authorities within specified timeframes.
How VigilPrism helps:
- Audit-ready reports generated in seconds
- Complete incident documentation and audit trails
- Historical data for incident analysis
- Evidence collection for regulatory reporting
Why self-hosted matters for NIS2
Data Sovereignty
NIS2 requires control over your security data. With VigilPrism, your data never leaves your infrastructure — no third-party cloud access.
Supply Chain Control
NIS2 emphasizes supply chain security. Self-hosted means no SaaS dependencies, no third-party data processors, no external attack surface.
Audit Evidence
Complete control over audit logs and evidence. No reliance on third parties for compliance documentation or incident reports.
Beyond NIS2: All frameworks covered
VigilPrism maps to multiple compliance frameworks. Cover NIS2 alongside GDPR, ISO 27001, and more.
NIS2
22 controlsEU Directive · Art. 21
Be audit-ready before authorities require Article 21 evidence. Gap analysis shows exactly what's missing.
GDPR
32 controlsData Protection · Art. 24-32
Prove your technical security measures to regulators. Evidence for Articles 24-32 without external consultants.
ISO 27001
93+ controls2013 & 2022 editions
Pass your certification audit the first time. Continuous evidence collection for all Annex A controls.
CIS
160+ checksSecurity Benchmarks
Industry-standard hardening checks. Free forever — see how your systems measure up.
NIST CSF
108 controlsCybersecurity Framework
Structure your security program with the most widely adopted framework. Identify, Protect, Detect, Respond, Recover.
SOC 2
64 controlsTrust Services Criteria
Win enterprise customers who require SOC 2. Demonstrate security commitment with evidence.
HIPAA
45 controlsHealthcare Compliance
Avoid healthcare penalties up to €1.5M. Prove you protect patient data with technical safeguards.
PCI DSS
78 controlsPayment Card Industry
Accept payments without compliance risk. Verify cardholder data protection requirements.
NIS2 Readiness Checklist
Quick self-assessment: Are you ready for NIS2? Check off the areas you have covered:
Can't check all boxes? That's where VigilPrism helps — it gives you visibility into gaps and tracks your progress toward compliance.
Start your NIS2 compliance journey
Begin with the free Community Edition. See where you stand across NIS2 requirements and track your progress toward compliance.
Free forever with up to 3 agents. No credit card required.