Vulnerability handling
Identify, handle and report vulnerabilities in systems.
home / compliance
compliance · NIS2
NIS2: penetration testing and vulnerability management
The NIS2 directive asks for risk-management measures, including vulnerability handling and verification that they work.
what the standard asks
What the directive asks.
Verification of effectiveness
Assess whether the measures adopted really work.
what we produce
The evidence we deliver.
Signed scope
Agreed in writing before work starts.
Report for management
A summary of risks and actions, for decision makers.
Report for technical staff
Reproduction steps and fixes.
Action log
Every action of the test, with date and stage.
summary
At a glance.
| Item | Detail |
|---|---|
| Who judges | The competent national authority and your auditors |
| Related service | Enterprise package with an agreed scope |
| Typical frequency | According to your risk-management plan |
Limits. Implementation of the directive varies by country. Check with your national contact.
Want an agreed scope for NIS2?
We reply by hand with a written proposal.