Playbooks
Prepare for NIS2
Turn the framework on, link your controls, keep risks, vendors and incidents, and prepare notification deadlines.
Role: Compliance manager This playbook organizes preparation for Directive (EU) 2022/2555 (NIS2). The app helps you track; it does not determine whether you are an essential or important entity.
Warning
The catalogue text is "written in our own words". Confirm with your counsel your qualification and obligations, which also depend on national transposition.
1. Turn the framework on
Screen: Frameworks. Turn on NIS2. Like DORA, it enters the score through common controls, not the assessment questionnaire.
2. Link your controls
Screen: Controls. For each requirement, see the controls that cover it, their state, their evidence. A requirement no catalogue control covers is a catalogue gap, not work on your side.
3. Risks and vendors
Screens: Risks, Assets, Vendors. The supply chain is tracked through the vendor register and its assessments.
4. Incidents and notification
Screen: Incidents (playbook). Choose NIS2: the app prepares deadlines (early warning, notification, final report) from the detection date; you record each submission.
5. Policies, training, review
Screens: Policies, People and training, Audits.
What the app does not do
- It sends nothing to the national authority and does not say a notification is required.
- It does not qualify your entity and never says you comply with NIS2.
- Deadline dates are prepared from the texts, to be confirmed with your counsel.
Was this page helpful?