Skip to content

NIS2

Technical evidence for NIS2.

NIS2 asks essential and important entities to manage cybersecurity risk with appropriate technical measures. LEA Platform checks those measures on every host and keeps signed evidence that they're in place.

What NIS2 asks for (technical side)

Article 21 lists measures that include policies on risk analysis and information system security, basic cyber hygiene, policies on cryptography and encryption, access control, and the use of multi-factor authentication where appropriate.

How LEA Platform helps

  • Cyber hygiene, checked

    Hardening rules for Linux, Windows and macOS on every cycle.

  • Cryptography

    Rules for legacy algorithms, TLS versions and crypto policies.

  • Access control

    SSH, password policy and account rules.

  • Evidence

    Signed snapshots and reports for management and auditors.

Example rules

Scroll sideways to see the full table

Example NIS2 rules
RuleNIS2 measurePlatform
SSH Legacy Algorithms DisabledArt. 21(2)(h) cryptographyLinux, macOS
Windows BitLocker System Drive Fully EncryptedArt. 21(2)(h) cryptographyWindows
Audit Rules Watch Identity FilesArt. 21(2)(b) incident handlingLinux
Kernel ASLR Fully EnabledArt. 21(2)(e) security in maintenanceLinux
SSH Empty Password Logins RejectedArt. 21(2)(i) access controlLinux, macOS

LEA Platform produces evidence; certification is granted only by an accredited auditor.

FAQ

Try it on your own servers.

30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.