NIS2 compliance
Applicability file, registration with DNSC, policies and procedures for all ten categories of measures, approved by management.
Applicability and registration
Layer 7 protection. Documented compliance.
We do not filter ports and IP addresses alone. Each control interrupts a concrete stage of the attack, and the measures become verifiable evidence for the obligations NIS2 legislation places on your organisation.
The attack cycle
Four phases, each interrupted by a different control.
-
Reconnaissance
The target is profiled from public addresses and information exposed through unencrypted DNS. Encrypted resolution and a reduced footprint make enumeration difficult.
-
Scanning
Open ports are searched for in the range 1–65535. The controls respond with a silent drop, returning nothing useful to the attacker.
-
Exploitation
The attacker exploits a vulnerable service, attempts brute-force or credential stuffing and delivers malicious payloads. The pattern is identified and the source blocked.
-
Post-exploitation
Persistence, Command and Control, and lateral movement towards critical data. This stage is limited by network segmentation and continuous monitoring.
What we offer
Five areas of work, each delivering the document or the control the law requires, not just a recommendation.
Risk assessment
Assessment of the risk level, maturity self-assessment, gap analysis against the applicable level, and a prioritised measures plan.
Risk and maturity
Technical measures
Firewall with Layer 7 inspection, segmentation and VLANs, multi-factor authentication, hardening, encryption, logging and vulnerability management.
Implementation and hardening
Managed services
Outsourced security officer, continuous monitoring and response, incident response, backup and restore tests.
Monthly subscription
Incident reporting
Early warning, notification with an initial assessment and a final report, within statutory deadlines counted in hours, not working days.
24 h · 72 h · 1 month
Deliverables, not recommendations
Each stage is clearly delimited, produces a required document and prepares the next step.
Compliance and documentation
Applicability file
An inventory of services, mapping to the annexes, the entity type and the article 9 analysis, with a documented conclusion.
Notification to DNSC
Standard form, supporting documents, electronic signature and correspondence with the competent authority.
Risk register
The risk level in the national platform, the impact of disruption and a register kept up to date.
Roadmap
Maturity self-assessment, gap analysis and remediation priorities, with deadlines approved by management.
Technical measures and operations
Layer 7 firewall
Our own platform installed at a single point of control, through which all traffic between the internet and the internal network passes.
Segmentation and VLANs
Isolated zones that limit lateral movement and the blast radius of a compromise.
Continuous monitoring
Behavioural detection, continuous monitoring and automatic blocking of sources showing attack patterns.
Incident response
Containment, eradication and recovery, with reporting to DNSC within the statutory 24 hours and periodic restore tests.
Not sure whether the law applies to you?
The applicability analysis answers that question and stands as evidence whatever the conclusion. Falling outside the law is not assumed: it has to be documented.