Ops Log tag
#NIS2
Reviewed Ops Log notes tagged NIS2, written by Michal Jatczak with source links, test context and operational checks.
2 reviewed notes
Decision MemoSecurity & Infrastructure
The offboarding evidence pack, control by control
An auditor does not ask whether an offboarding SOP exists. They ask for the artifact that proves each control ran. Here are the twelve controls I build the evidence pack around and the proof each one needs.
By Michal Jatczak
Operator RunbookSecurity & Infrastructure
NIS2 for managed service providers: who is actually in scope, and what Article 21 requires
A clause-by-clause scoping runbook for managed service providers under Directive (EU) 2022/2555: the size test that lives in the SME Recommendation, the closed Article 2(2) list that does not name MSPs, the Article 21(2) control set as expanded by Implementing Regulation (EU) 2024/2690, and the Article 23 reporting clock with the MSP-specific significance thresholds.
By Michal Jatczak