NIS2, DORA and EU Cyber Regulation

NIS2, DORA and EU cybersecurity regulation

Documents

• Cyber Threat Intelligence Sharing Agreement Between Companies
• Coordinated Vulnerability Disclosure Agreement with Security Researchers (Bug Bounty)
• Notification to Clients and Users of a Significant Cyber Incident (NIS2)
• Security Update and Software Product Support Policy (Cyber Resilience Act)
• Declaration of Conformity for Products with Digital Elements (EU Cyber Resilience Act)
• Notification of a Significant ICT Incident to the Competent Financial Regulator (DORA)
• Clause on Access Rights, Audit, and Exit Strategy in a Contract with an ICT Provider (DORA)
• Digital Operational Resilience Testing Plan of a Financial Entity (TLPT, DORA)
• Contract on ICT Third-Party Risk Management under the DORA Regulation
• Records of Contracts with ICT Providers under the DORA Regulation (Information Register)
• Information Asset and System Register for NIS2 Compliance Purposes
• Access Management and Privileged Accounts Policy (NIS2)
• NIS2 Compliance Checklist for Companies Providing Services in the EU
• Internal Act on Recording and Internal Escalation of Cyber Incidents (NIS2)
• Business Continuity and System Recovery Plan Following a Cyber-Attack (NIS2)
• Internal Act on Multi-Factor Authentication and Cryptographic Security Measures (NIS2)
• Internal Act on Basic Cyber Hygiene Measures (NIS2)
• Rulebook on Cybersecurity Training for Management Members and Employees (NIS2)
• Supply Chain Security Clause in Contracts with ICT Service Providers (NIS2)
• NIS2 Directive-Compliant Cyber Incident Response Plan
• Management Statement of Responsibility for Cyber Risk Management Measures (NIS2)
• Cybersecurity Risk Management Policy under the NIS2 Directive
• Decision on Determining the Status of an Essential or Important Entity under the NIS2 Directive
• Notification of a Significant Incident to the Competent CSIRT Team Within 24 Hours (Early Warning, NIS2)