Legal Regulations
Stay compliant with the latest cybersecurity regulations and directives
CER Directive (Critical Entities Resilience)
New EU directive on the resilience of critical entities, replacing Directive 2008/114/EC.
Key aspects
- Identification of critical entities
- Mandatory security measures
- Risk assessment and planning
- International cooperation
- Monitoring and reporting
Requirements
- Risk assessment every 4 years
- Operational resilience plan
- Plan testing every 2 years
- Incident reporting
- Cooperation with national authorities
NIS2 Self-Assessment
Tool for self-assessment of NIS2 directive compliance, enabling identification of areas requiring improvement.
Features
- Automatic compliance assessment
- Detailed results report
- Improvement recommendations
- Progress monitoring
- NIS2 requirements compliance
Assessment areas
- Risk management
- Network and systems security
- Incident management
- Business continuity assurance
- Regulatory compliance
Machinery Directive
New EU directive on machinery, introducing cybersecurity requirements for machines and machinery systems.
Key aspects
- Cybersecurity requirements for machinery
- Cybersecurity risk assessment
- Technical documentation
- CE marking and declaration of conformity
- Monitoring and reporting
Requirements
- Cybersecurity risk assessment
- Implementation of security measures
- Technical documentation
- Compliance certification
- Progress monitoring
CRA (Cyber Resilience Act)
New EU directive on cyber resilience of digital products, introducing security requirements for software and hardware.
Key aspects
- Security requirements for digital products
- Cybersecurity risk assessment
- Security documentation
- Compliance certification
- Monitoring and reporting
Requirements
- Cybersecurity risk assessment
- Implementation of security measures
- Security documentation
- Compliance certification
- Progress monitoring
UKSC (National Cybersecurity System Act)
Polish act implementing the NIS2 directive, regulating the national cybersecurity system and obligations of critical entities.
Key aspects
- Identification of critical entities
- Mandatory security measures
- Risk assessment and planning
- Cooperation with national authorities
- Monitoring and reporting
Requirements
- Risk assessment every 4 years
- Operational resilience plan
- Plan testing every 2 years
- Incident reporting
- Cooperation with CSIRT MON
Check your compliance
NIS2 compliance assessment
Our own tool, in two steps: first check whether the directive covers your organisation and as which kind of entity, then score your security controls against the NIS2 requirements.
- Scope self-assessment — sector, size and turnover
- Score broken down by area of the directive
- References to the specific NIS2 articles
- No sign-up — answers stay in your browser