From applicability to authority report
The directive's classification criteria, obligations and statutory incident deadlines — tracked, not guessed.
Applicability wizard
A guided questionnaire determines your organization's NIS2 classification — essential entity, important entity, or not in scope — using the directive's sector and size criteria.
- 01.1Sector & sub-sector identification
- 01.2Size thresholds under the directive
- 01.3Essential vs. Important classification
- 01.4PDF applicability report
Obligations catalog
Complete catalog of NIS2 obligations mapped article by article. Track compliance status per obligation and link controls and evidence.
- 02.1Article-by-article breakdown
- 02.2Management duties under Art. 20
- 02.3Control & evidence linking
- 02.4Compliance scoring per obligation
Incident reporting workflow
NIS2 mandates strict incident reporting timelines. Cautera automates the workflow with built-in deadlines, authority reporting templates, and status tracking.
Portugal: transposed and tracked
Portugal's transposition, Decree-Law 125/2025, is built in: a CNCS registration checklist with PDF summary, CSIRT-ready incident reports, and Art. 20 management-duty tracking.
- 04.1CNCS registration checklist with PDF summary
- 04.2CSIRT-ready incident reports
- 04.3Art. 20 management duties
- 04.4NIS2 deadline reminders
Start your NIS2 assessment
Determine your applicability and track compliance from day one.