NIS2 significantly strengthens supervisory powers: authorities can conduct audits on occasion or regularly, request documents and conduct on-site inspections at essential entities.
Supervisory powers under NIS2
NIS2 Art. 32 (essential entities) and Art. 33 (important entities) give authorities: on-site inspections and remote monitoring, security audits by independent bodies, request for information and documents on demand, ordering measures to remedy security deficiencies, and imposition of fines. For essential entities: proactive supervision without specific cause.
Wesentliche Einrichtungen unterliegen unter NIS2 einer proaktiven Aufsicht — Behörden können jederzeit prüfen, auch ohne konkreten Anlass oder Sicherheitsvorfall.
Preparing for NIS2 audits
For NIS2 audits, organisations should prepare: complete documentation of all security measures under Art. 21, evidence of supplier assessments and TPRM measures, incident response processes and reporting documentation, training evidence for employees and management, and current risk assessments and treatment plans.
360TPRM erstellt automatisch vollständige, auditfähige Dokumentation aller TPRM-Maßnahmen — für NIS2-Audits jederzeit abrufbar.
FAQ
Prepare for NIS2 audit
See in a 45-minute demo how 360TPRM specifically meets your requirements.
Request free demo →