[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nis2\u002F21":3},{"item":4,"lessons":16,"controls":66,"related":94},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nis2","21","Article 21","Cybersecurity risk-management measures",22,"NIS2 Directive","**What it asks for.** Article 21 requires essential and important entities to take appropriate and proportionate technical, operational and organisational measures to manage risks to their network and information systems and to limit the impact of incidents. Article 21(2) lists the minimum areas measures must cover, based on an all hazards approach.\n\n**In practice.** Entities run a documented risk assessment and map each Article 21(2) area to implemented controls, policies and owners, often using an established framework such as ISO 27001. Measures are proportionate to size, exposure and potential impact, take the state of the art into account and are reviewed regularly. Evidence includes the risk assessment, control mapping, policies and effectiveness reviews.\n\n**Common gaps.** Organisations often treat the list as a checklist without a real risk assessment. Supply chain security and effectiveness assessment are commonly the weakest areas.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022L2555#art_21","Read the article on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","2026-10-13T14:21:25.902+00:00",{"slug":23,"title":24,"published_at":25},"chinese-state-sponsored-tools-target-critical-infrastructure-via-botnets-and-spear-phishing","Chinese State-Sponsored Tools Target Critical Infrastructure via Botnets and Spear Phishing","2026-10-09T10:21:16.232+00:00",{"slug":27,"title":28,"published_at":29},"russias-hybrid-cyber-physical-attacks-target-european-nations-supporting-ukraine","Russia's Hybrid Cyber-Physical Attacks Target European Nations Supporting Ukraine","2026-09-25T08:20:21.965+00:00",{"slug":31,"title":32,"published_at":33},"ai-powered-defense-for-critical-infrastructure-lessons-from-ukraines-daybreak-program","AI-Powered Defense for Critical Infrastructure: Lessons from Ukraine's Daybreak Program","2026-09-23T21:20:52.905+00:00",{"slug":35,"title":36,"published_at":37},"satellite-infrastructure-under-fire-lessons-from-the-viasat-ka-sat-attack","Satellite Infrastructure Under Fire: Lessons from the Viasat KA-SAT Attack","2026-09-04T18:21:00.273+00:00",{"slug":39,"title":40,"published_at":41},"uk-moves-to-restrict-high-risk-tech-suppliers-from-critical-infrastructure","UK Moves to Restrict High-Risk Tech Suppliers From Critical Infrastructure","2026-09-02T16:20:35.305+00:00",{"slug":43,"title":44,"published_at":45},"russian-hackers-target-eu-officials-via-encrypted-messaging-apps","Russian Hackers Target EU Officials via Encrypted Messaging Apps","2026-08-27T12:20:46.665+00:00",{"slug":47,"title":48,"published_at":49},"pro-russian-group-launches-3-day-dos-attack-on-norwegian-government-services","Pro-Russian Group Launches 3-Day DoS Attack on Norwegian Government Services","2026-08-27T10:21:48.097+00:00",{"slug":51,"title":52,"published_at":53},"iran-linked-hackers-disrupt-uk-energy-generator-for-four-days","Iran-Linked Hackers Disrupt UK Energy Generator for Four Days","2026-08-25T20:20:22.984+00:00",{"slug":55,"title":56,"published_at":57},"ddos-attack-disrupts-norways-government-digital-services","DDoS Attack Disrupts Norway's Government Digital Services","2026-08-25T16:20:24.163+00:00",{"slug":59,"title":60,"published_at":61},"ai-accelerated-vulnerability-discovery-widens-the-remediation-gap","AI-Accelerated Vulnerability Discovery Widens the Remediation Gap","2026-08-24T18:21:20.959+00:00",{"slug":63,"title":64,"published_at":65},"nato-and-ai-startup-gain-authority-to-assign-cve-ids-expanding-global-vulnerability-tracking","NATO and AI Startup Gain Authority to Assign CVE IDs, Expanding Global Vulnerability Tracking","2026-08-10T20:20:18.158+00:00",[67,72,76,81,85,90],{"slug":68,"name":69,"problem":70,"stories":71},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",6,{"slug":73,"name":74,"problem":75,"stories":71},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":77,"name":78,"problem":79,"stories":80},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",4,{"slug":82,"name":83,"problem":84,"stories":80},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":86,"name":87,"problem":88,"stories":89},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",3,{"slug":91,"name":92,"problem":93,"stories":89},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[95,100,105,110,115,121,126,131],{"family":96,"item":97,"code":98,"title":98,"together":99},"itil","overview","ITIL",14,{"family":101,"item":102,"code":103,"title":104,"together":99},"cis","13","Control 13","Network Monitoring and Defense",{"family":101,"item":106,"code":107,"title":108,"together":109},"17","Control 17","Incident Response Management",10,{"family":111,"item":112,"code":113,"title":114,"together":109},"nist-800-53","ir-4","IR-4","Incident Handling",{"family":116,"item":117,"code":118,"title":119,"together":120},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",9,{"family":101,"item":122,"code":123,"title":124,"together":125},"12","Control 12","Network Infrastructure Management",8,{"family":101,"item":127,"code":128,"title":129,"together":130},"7","Control 7","Continuous Vulnerability Management",5,{"family":111,"item":132,"code":133,"title":134,"together":130},"ac-17","AC-17","Remote Access"]