Compliance Standards for Network and Information Security Directive (NIS2)

Specifies requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). Provides a systematic approach to managing sensitive company information.

Comprehensive framework for managing cybersecurity risks through six core functions: Govern, Identify, Protect, Detect, Respond, and Recover. Provides a common language for cybersecurity across organizations and sectors.

Specifies requirements for a business continuity management system (BCMS) to protect against, prepare for, respond to, and recover from disruptive incidents. Essential for maintaining critical operations during cybersecurity incidents.

Prioritized set of 18 actions that provide a proven defense against common cyber attacks. Focuses on practical, actionable security measures that can be implemented to significantly improve security posture.

Collection of practical guidelines and best practices published by ENISA covering IoT security, vulnerability disclosure, supply chain security, and incident handling aligned with EU regulatory requirements.

Provides guidelines for information security incident management, including preparation, detection, assessment, response, and lessons learned. Covers the complete incident lifecycle from planning to post-incident activities.

Provides guidance on information security in supplier relationships, including supply chain security. Addresses how to secure information and ICT supply chains.