All frameworks

    Framework guide

    FEHA and NIS2

    What It Takes, and How FEHA Handles It

    The NIS2 Directive is the EU's updated cybersecurity law, replacing the original NIS Directive with a much wider scope and stricter enforcement. It applies to "essential" and "important" entities across sectors like energy, transport, banking, health, and digital infrastructure, including many mid-sized companies that weren't covered under the original rules.

    Being in scope means putting real governance around cyber risk: incident reporting within tight deadlines, supply-chain security requirements, and management-level accountability for cybersecurity decisions, not just an IT policy sitting in a drawer.

    Book a demo See every framework FEHA covers
    Framework recordnis-2
    Category Resilience
    ObligationMandatory
    RegionEuropean Union (NL, DE, FR)
    Applies toIn-scope sectors: energy, transport, health, digital…
    Evidence overlap2 frameworks
    Book a demo

    The playbook

    How FEHA handles it

    The same 4-step path every NIS 2 Directive engagement runs, start to finish.

    STEP 01

    We confirm whether your business falls in scope, and under which entity category

    STEP 02

    We map your existing controls against NIS2's requirements, so you see the real gaps

    STEP 03

    We build your incident-reporting process so you're not improvising when something happens

    STEP 04

    We prepare your team for the questions a regulator or auditor will ask

    Evidence overlap

    Related frameworks

    Evidence you build for NIS 2 Directive carries over to these too.

    SecurityVoluntary

    ISO 27001:2022

    The international standard for information security management systems.

    For: Any organization that handles sensitive data

    Global↔ 3 overlaps
    FinancialMandatory

    DORA

    EU digital operational resilience rules for the financial sector.

    For: EU financial entities and their ICT providers

    European Union↔ 2 overlaps

    FAQ

    Frequently asked questions

    Still have questions? Talk to us

    Yes, if you provide services to the EU or sit in the supply chain of an in-scope EU company, NIS2 can reach you indirectly.

    Talk to a team that handles NIS 2 Directive every day.

    Named compliance experts run this framework end to end, from first gap assessment to a passed audit.

    Explore every framework FEHA covers

    NIS 2 Directive

    ResilienceMandatory

    ISO 27001 Lead Auditors, CISSPs, and CISMs — the people who would actually work your European Union (NL, DE, FR) file.

    Book a demo