Krav

Ten minimum security measures (summary)

provision: Art. 21(2)(a)–(j)
roles: essential-entity, important-entity
text: At least: risk analysis and security policies; incident handling; business continuity, backup, disaster recovery and crisis management; supply chain security; security in acquisition, development and maintenance including vulnerability handling; assessment of effectiveness; cyber hygiene and training; cryptography and encryption; human resources security, access control and asset management; multi-factor authentication and secured communications.
verbatim: false

Id:: requirement:eu:nis2:art-21-2
Version:: 1 (graf 2026-10-10.1)
Hash:: e4c8aa41ff87f4e6f21c4866daa2094419d5d7cc4083511ec02603f30b90fad8
Källa:: Art. 21(2)(a)–(j), läst 2026-10-10
JSON:: https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Anis2%3Aart-21-2

Kopplingar och beslutsvägar finns i NovaCopilot med partnernyckel. Source: NovaCopilot.