NIS2 Compliance Resources
Standards-based resources leveraging ISO 27001, NIST CSF 2.0, CIS Controls, and ENISA guidance
Access comprehensive guidance built on proven frameworks: ISO/IEC 27001 for governance, ISO/IEC 27035 and 22301 for resilience, NIST CSF 2.0 for implementation, and ENISA guidance for EU interpretation.
Start Your NIS2 Compliance Journey
Our comprehensive compliance guide walks you through NIS2 requirements step by step, helping you understand your obligations and build a compliance roadmap.
- Sector classification
- Entity type determination
- Obligation mapping
- Implementation guidance
All CRA Tools
Comprehensive toolkit for every stage of CRA compliance
Assessment & Planning
Start here to understand your NIS2 obligations and compliance requirements
NIS2 Compliance Guide
Comprehensive step-by-step guide to achieving NIS2 compliance for essential and important entities
- Step-by-step compliance
- Entity classification
- Implementation roadmap
NIS2 Articles Reference
Browse all 45 NIS2 articles with plain-language explanations and compliance guidance
- All 45 articles
- Plain-language summaries
- Legal references
NIS2 Obligations Overview
Understand your specific obligations based on whether you're an essential or important entity
- Essential entity duties
- Important entity duties
- Sector-specific requirements
Standards & Frameworks
Understand how international standards map to NIS2 requirements
NIS2 Standards Mapping
Explore how ISO 27001, NIST CSF, CIS Controls, and other frameworks align with NIS2 requirements
- ISO 27001 mapping
- NIST CSF alignment
- CIS Controls integration
Implementation Timeline
View key NIS2 deadlines, transposition dates, and compliance milestones
- Key deadlines
- Member state transposition
- Compliance milestones
Penalties & Enforcement
Understand NIS2 penalty structure and enforcement mechanisms across member states
- Penalty amounts
- Enforcement actions
- Management liability
Resources by Sector
Find guidance specific to your industry sector under NIS2
Energy Sector
Electricity, oil, gas, renewable energy
- NIS2 Compliance Guide
- Standards Mapping
- Obligations Overview
Transport
Air, rail, water, road transport
- NIS2 Compliance Guide
- Standards Mapping
- Obligations Overview
Digital Infrastructure
Cloud services, data centers, CDNs
- NIS2 Compliance Guide
- Standards Mapping
- Obligations Overview
Healthcare
Hospitals, medical devices, healthcare IT
- NIS2 Compliance Guide
- Standards Mapping
- Obligations Overview
Need Expert Guidance?
NIS2 implementation can be complex. Our experts provide specialized support for technical and compliance challenges.
Expert Consultation
Strategic guidance on NIS2 compliance approach and regulatory requirements
Contact ExpertsResource Updates
Our resources are continuously updated to reflect evolving NIS2 guidance and national implementation measures.
- • Simplified tools page to link to existing resources
- • Updated compliance guide with latest guidance
- • Added standards mapping information
Crosswalk · From the team behind this siteFrom reading NIS2 to showing what you have in place
Crosswalk assesses your organisation against the NIS2 baseline: the governance duty of Art. 20, the ten risk-management measures of Art. 21 and the reporting deadlines of Art. 23. It assesses against the Directive, so tighten it to your national act where that goes further. Where a duty coincides with the CRA or the GDPR it is flagged, so you assess once and evidence it for both.
- Art. 20, 21 and 23 as a gap analysis, with the Directive text alongside
- A NIS2 dossier you can export and hand over
- The 24 hour, 72 hour and one month clocks worked out per incident
Lite licence at €0 at launch: one project, all five laws, no payment details, a small "Made with Crosswalk Lite" credit on what it makes. Paid plans from €99 per person per month.