{"id":69,"date":"2026-05-10T12:24:47","date_gmt":"2026-05-10T09:24:47","guid":{"rendered":"https:\/\/demo.bravisthemes.com\/cyberguard\/?p=69"},"modified":"2026-05-10T21:21:14","modified_gmt":"2026-05-10T18:21:14","slug":"%d0%b8%d0%b7%d0%b8%d1%81%d0%ba%d0%b2%d0%b0%d0%bd%d0%b8%d1%8f-%d0%bd%d0%b0-nis-2-%d0%ba%d0%be%d0%b8-%d0%bc%d0%b5%d1%80%d0%ba%d0%b8-%d1%82%d1%80%d1%8f%d0%b1%d0%b2%d0%b0-%d0%b4%d0%b0-%d0%bf","status":"publish","type":"post","link":"https:\/\/cybernetics.bg\/en\/%d0%b8%d0%b7%d0%b8%d1%81%d0%ba%d0%b2%d0%b0%d0%bd%d0%b8%d1%8f-%d0%bd%d0%b0-nis-2-%d0%ba%d0%be%d0%b8-%d0%bc%d0%b5%d1%80%d0%ba%d0%b8-%d1%82%d1%80%d1%8f%d0%b1%d0%b2%d0%b0-%d0%b4%d0%b0-%d0%bf\/","title":{"rendered":"NIS 2 requirements: which measures companies should review"},"content":{"rendered":"
\n\t\t\t\t
\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n\t\t
\n\t\t\t

\u0415\u0434\u043d\u0430 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0438\u0442\u0435 \u0442\u0435\u043c\u0438 \u0432 \u043f\u0440\u043e\u043c\u0435\u043d\u0438\u0442\u0435 \u043d\u0430 \u0417\u0430\u043a\u043e\u043d\u0430 \u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0441\u0438\u0433\u0443\u0440\u043d\u043e\u0441\u0442 \u0435 \u0432\u044a\u0432\u0435\u0436\u0434\u0430\u043d\u0435\u0442\u043e \u043d\u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438 \u0438 \u043f\u0440\u043e\u043f\u043e\u0440\u0446\u0438\u043e\u043d\u0430\u043b\u043d\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438, \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u0438 \u043c\u0435\u0440\u043a\u0438 \u0437\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0440\u0438\u0441\u043a\u0430.<\/strong> \u0422\u043e\u0432\u0430 \u0435 \u0432\u0430\u0436\u043d\u0430 \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0430, \u0437\u0430\u0449\u043e\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u0432\u0430, \u0447\u0435 \u0441\u044a\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u0442\u043e \u0441 NIS 2 \u043d\u0435 \u0441\u0435 \u0441\u0432\u0435\u0436\u0434\u0430 \u0434\u043e \u0435\u0434\u0438\u043d \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0438\u043b\u0438 \u0435\u0434\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430.
The organization must assess what risks exist for its network and information systems and what measures are necessary in relation to those risks.
Among the main areas that companies should pay attention to are:<\/p>\t\t\n\t\t<\/div>\n\t<\/div>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\r\n\t\t

\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n \t
\r\n \t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 1\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Policies for risk analysis and information systems security;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t\t\t
\r\n\t\t\t \t\t\t <\/div>\r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 2\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Incident response actions;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t\t\t
\r\n\t\t\t \t\t\t <\/div>\r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 3\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Business continuity;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 4\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Backups and disaster recovery;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 5\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Crisis management;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 6\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Supply chain security;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 7\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Security in the acquisition, development, and maintenance of systems;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 8\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Assessment of the effectiveness of measures;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 9\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Basic cyber hygiene practices and training;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 10\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Cryptography and encryption, where applicable;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 11\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Human resources security;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 12\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Access control and asset management;\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t
\r\n\t\t\t\t\t\t\t\t\t\t\t
\r\n\t\t 13\t\t <\/div>\r\n\t \t
\r\n\t \t\t\t\t\t\t\t\t
\r\n\t\t\t Multi-factor authentication or other secure authentication solutions, where appropriate.\t\t\t <\/h5>\r\n\t\t \r\n\t\t \t <\/div>\r\n\t <\/div>\r\n\t \t<\/div>\r\n <\/div>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\r\n\t\t
\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n\t\t
\n\t\t\t

These are areas where practical gaps are often identified. For example, an organization may have backups but may not have tested the recovery process. It may have access policies in place but no regular review of user permissions. It may use external providers without having assessed the risks associated with them.
That is why the review of NIS 2 readiness should be structured. It is not enough to check only whether technical protection is in place. It is necessary to assess whether the measures are appropriate, proportionate, documented, and applicable in the organization\u2019s actual operations.
A professional gap analysis can show exactly that: which requirements are already covered, which are partially covered, and where gaps exist. This gives the company a clear picture and an action plan, instead of a general feeling that \u201csomething needs to be done.\u201d<\/p>\t\t\n\t\t<\/div>\n\t<\/div>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n \r\n
<\/div>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

\u0415\u0434\u043d\u0430 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0438\u0442\u0435 \u0442\u0435\u043c\u0438 \u0432 \u043f\u0440\u043e\u043c\u0435\u043d\u0438\u0442\u0435 \u043d\u0430 \u0417\u0430\u043a\u043e\u043d\u0430 \u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0441\u0438\u0433\u0443\u0440\u043d\u043e\u0441\u0442 \u0435 \u0432\u044a\u0432\u0435\u0436\u0434\u0430\u043d\u0435\u0442\u043e \u043d\u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438 \u0438 \u043f\u0440\u043e\u043f\u043e\u0440\u0446\u0438\u043e\u043d\u0430\u043b\u043d\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438, \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u0438 \u043c\u0435\u0440\u043a\u0438 \u0437\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0440\u0438\u0441\u043a\u0430. \u0422\u043e\u0432\u0430 \u0435 \u0432\u0430\u0436\u043d\u0430 \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0430, \u0437\u0430\u0449\u043e\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u0432\u0430, \u0447\u0435 \u0441\u044a\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u0442\u043e \u0441 NIS 2 \u043d\u0435 \u0441\u0435 \u0441\u0432\u0435\u0436\u0434\u0430 \u0434\u043e \u0435\u0434\u0438\u043d \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0438\u043b\u0438 \u0435\u0434\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430.\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0442\u0430 \u0442\u0440\u044f\u0431\u0432\u0430 \u0434\u0430 \u043f\u0440\u0435\u0446\u0435\u043d\u0438 \u043a\u0430\u043a\u0432\u0438 \u0440\u0438\u0441\u043a\u043e\u0432\u0435 \u0441\u044a\u0449\u0435\u0441\u0442\u0432\u0443\u0432\u0430\u0442 \u0437\u0430 \u043d\u0435\u0439\u043d\u0438\u0442\u0435 \u043c\u0440\u0435\u0436\u043e\u0432\u0438 […]<\/p>\n","protected":false},"author":1,"featured_media":3661,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[6,7,8,9,10,11,12,13,14,15,16,17],"class_list":["post-69","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai-threats","tag-cloud-security","tag-cyber-awareness","tag-cybersecurity","tag-data-protection","tag-incident-response","tag-network-defense","tag-phishing","tag-ransomware","tag-soc","tag-threat-detection","tag-zero-day"],"jetpack_featured_media_url":"https:\/\/cybernetics.bg\/wp-content\/uploads\/2026\/05\/558cab25-c5c5-4956-918d-c891fa139a63.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/posts\/69","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/comments?post=69"}],"version-history":[{"count":14,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/posts\/69\/revisions"}],"predecessor-version":[{"id":3728,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/posts\/69\/revisions\/3728"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/media\/3661"}],"wp:attachment":[{"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/media?parent=69"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/categories?post=69"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybernetics.bg\/en\/wp-json\/wp\/v2\/tags?post=69"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}