Cyber hygiene under NIS2 Art. 21 covers the basic security measures that every affected organisation must implement — as a minimum standard for adequate cybersecurity.
Cyber hygiene measures under NIS2
NIS2 defines as minimum measures: (1) multi-factor authentication (MFA) for all critical systems and remote access, (2) current patch management — regular updates of all systems, (3) encryption of sensitive data in transit and at rest, (4) access control on need-to-know basis, (5) regular backups with restoration tests, (6) cybersecurity training for all employees, (7) incident response plan, (8) secure email gateway and phishing protection.
85% aller erfolgreichen Cyberangriffe hätten durch grundlegende Cyberhygiene-Maßnahmen verhindert werden können (Gartner). NIS2 macht diese Maßnahmen zur gesetzlichen Pflicht.
Requiring cyber hygiene from suppliers
NIS2 Art. 21(d) requires organisations to pass security requirements to their suppliers. Cyber hygiene minimum standards must be anchored in supplier contracts — and their compliance must be monitored. 360TPRM automatically checks whether suppliers meet basic cyber hygiene requirements.
Lieferanten ohne MFA und aktuelles Patch-Management sind unter NIS2 ein inakzeptables Risiko. 360TPRM erkennt solche Schwachstellen automatisch.
FAQ
Check cyber hygiene automatically
See in a 45-minute demo how 360TPRM specifically meets your requirements.
Request free demo →