NIS2 template · NIS 2 Directive
Access Control & Authentication Policy
Establishes access control policies and asset management requirements for network and information systems, aligned with NIS 2 Article 21(2)(i). Written for your company, citing the controls below.
- Sections
- 7
- Controls cited
- 11
- Formats
- PDF, Word
- Shelf
- 10 NIS2documents in all
No card needed to start.
NIS27 sections
Access Control & Authentication PolicyEstablishes access control policies and asset management requirements for network and information systems, aligned with NIS 2 Article 21(2)(i).
- Cites
- Art. 21.2j, Art. 21.2i, SOC 2 CC6.1 and 8 more
- Formats
- PDF and Word
NIS2 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Identity Management
- Authentication Standards
- Role-Based Access Control
- Privileged Access Management
- Access Reviews and Recertification
- Access Revocation
Controls it cites
The NIS2 controls first, then the matching controls in other frameworks.
- Art. 21.2jAccess ControlNIS2
- Art. 21.2iHR SecurityNIS2
- SOC 2 CC6.1Logical & Physical Access: Security SoftwareSOC 2
- SOC 2 CC6.2Logical & Physical Access: CredentialsSOC 2
- SOC 2 CC6.3Logical & Physical Access: AuthorizationSOC 2
- ISO A.8.2Privileged Access RightsISO 27001
- ISO A.8.5Secure AuthenticationISO 27001
- HIPAA §164.312(a)(1)Access ControlHIPAA
- PCI DSS Req. 7Restrict AccessPCI DSS
- CSF PR.AA-5Access PermissionsNIST CSF
- 800-53 AC-1Access Control PolicyNIST 800-53
- NIS26 sections
Multi-Factor Authentication Policy
CitesArt. 21.2j SOC 2 CC6.1 SOC 2 CC6.2 +5 +6PDF · WordCites Art. 21.2j, Access Control (NIS2); SOC 2 CC6.1, Logical & Physical Access: Security Software (SOC 2); SOC 2 CC6.2, Logical & Physical Access: Credentials (SOC 2), and 5 more. - NIS27 sections
Crisis Management & Governance Policy
CitesArt. 21.2c Art. 29 SOC 2 CC7.5 +5 +6PDF · WordCites Art. 21.2c, Business Continuity (NIS2); Art. 29, Cross-border Cooperation (NIS2); SOC 2 CC7.5, System Operations: Recovery (SOC 2), and 5 more. - NIS27 sections
Cybersecurity Risk Management Policy
CitesArt. 21.2a Art. 21.2g SOC 2 CC3.1 +5 +6PDF · WordCites Art. 21.2a, Risk Analysis and Policies (NIS2); Art. 21.2g, Security Assessment (NIS2); SOC 2 CC3.1, COSO Principle 6: Risk Objectives (SOC 2), and 5 more. - NIS28 sections
Incident Handling & Reporting Policy
CitesArt. 21.2b Art. 23 SOC 2 CC7.3 +5 +6PDF · WordCites Art. 21.2b, Incident Handling (NIS2); Art. 23, Incident Reporting (NIS2); SOC 2 CC7.3, System Operations: Incident Response (SOC 2), and 5 more. - NIS27 sections
Business Continuity & Crisis Management Policy
CitesArt. 21.2c SOC 2 A1.1 SOC 2 A1.2 +6 +7PDF · WordCites Art. 21.2c, Business Continuity (NIS2); SOC 2 A1.1, Availability: Capacity Planning (SOC 2); SOC 2 A1.2, Availability: Recovery (SOC 2), and 6 more. - NIS27 sections
Supply Chain Security Policy
CitesArt. 21.2d SOC 2 CC9.2 ISO A.5.19 +4 +5PDF · WordCites Art. 21.2d, Supply Chain Security (NIS2); SOC 2 CC9.2, Risk Mitigation: Vendor & Business Partner (SOC 2); ISO A.5.19, Information Security in Supplier Relationships (ISO 27001), and 4 more.
NIS2 on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so NIS2 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.