--- title: "Control NIS2: framework alignment for essential | Firevault" description: "Satisfy NIS2 network and information system security measures using Control's physical segmentation and access governance capabilities. Learn why." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/solutions/control/frameworks/nis2#webpage", "url": "https://fire-vault.com/solutions/control/frameworks/nis2", "name": "Control NIS2: framework alignment for essential", "description": "Satisfy NIS2 network and information system security measures using Control's physical segmentation and access governance capabilities. Learn why.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-solutions.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/solutions/control/frameworks/nis2#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/solutions/control/frameworks/nis2#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Solutions", "item": "https://fire-vault.com/solutions" }, { "@type": "ListItem", "position": 3, "name": "Control", "item": "https://fire-vault.com/solutions/control" }, { "@type": "ListItem", "position": 4, "name": "Frameworks", "item": "https://fire-vault.com/solutions/control/frameworks" }, { "@type": "ListItem", "position": 5, "name": "Control NIS2: framework alignment for essential", "item": "https://fire-vault.com/solutions/control/frameworks/nis2" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) NIS2 # Physical Compliance with NIS2 Directive Requirements NIS2 requires essential and important entities to implement appropriate technical measures for network security, access control, and incident handling. Control provides physical enforcement that demonstrably exceeds directive requirements. - Configuration drift in firewalls - Unverifiable segmentation - Personal management liability - Slow incident notification Schedule a Demo[Back to Control](/solutions/control) Control at a glance ![Glowing EU regulatory shield surrounded by floating compliance documents](/assets/nis2-DYj1BhSI.jpg) Control removes the physical path. Blueprints show where each module sits. Overview ExposureHow it worksExplore moreQuestions Overview ## Continuous physical evidence for Article 21. [Read the AI and Control blueprints playbook](/playbook/ai-control-blueprints) NIS2 raises the bar from configured controls to demonstrably effective controls, with personal accountability at board level. Control replaces software-only segmentation with hardware-enforced zone boundaries and produces continuous, signed evidence of separation, access governance and incident handling that auditors can verify directly. The exposure in numbers 01 Full Article 21 requirements coverage Art. 21 Full Article 21 requirements coverage 02 Physical network segmentation enforcement 100% Physical network segmentation enforcement 03 Incident notification capability support 24hr Incident notification capability support 04 Automated compliance evidence generation Full Automated compliance evidence generation The Compliance Challenge ## NIS2 demands demonstrable security measures. 01 ### Proportionate Measures NIS2 requires measures proportionate to the risk. For essential services, this means demonstrating that security measures go beyond standard software controls. 02 ### Network Segmentation Article 21 requires network segmentation, but many organisations rely on VLAN-based separation that can be bypassed through misconfiguration. 03 ### Management Accountability NIS2 introduces personal liability for management bodies. Demonstrating appropriate measures requires evidence that goes beyond compliance checklists. Pain points - Firewall rule sets drift between audits, leaving unmonitored gaps in segmentation. - VLAN-based separation cannot be evidenced as continuously effective. - Incident reporting timelines collapse without out-of-band recovery infrastructure. - Boards face personal liability and need verifiable proof, not policy attestations. NIS2 > NIS2 requires appropriate and proportionate measures. For essential services that underpin national infrastructure, appropriate means physical, not just logical. The Scenario ### Scenario: NIS2 Audit with Physical Evidence An essential entity faces its first NIS2 compliance audit. The assessor examines network segmentation controls and finds that existing firewall-based segmentation, while configured correctly today, has experienced three misconfiguration incidents in the past year that temporarily created paths between zones. Each incident violated NIS2 requirements for the duration it existed. The organisation cannot demonstrate continuous compliance. With Control, the organisation presents physical zone boundary evidence showing continuous, unbroken zone separation. Conduit activations are logged with multi-party authorisation records. The assessor can verify that physical boundaries were maintained at all times, providing evidence of continuous compliance. "Our auditor asked us to prove that our network segmentation had been continuously effective for the past twelve months. With firewall logs, we could show configuration at a point in time. We could not prove there had been no gaps between audits." NIS2 mapping ## Where NIS2 Article 21 measures meet Control modules. NIS2 Article 21 names the measures essential and important entities must implement. Control provides the physical enforcement layer that turns those measures into evidence rather than intent. Reference: Directive (EU) 2022/2555 (NIS2), Article 21(2)(a) to (j), with cross-reference to NCSC CAF outcomes. SEC 01 Risk and security policies (Art. 21(2)(a)-(b)) - 21(2)(a) Risk analysis and information security policies Continuous attestation of conduit state provides the evidence behind the policy. ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate ![FV-Archive module icon](/assets/archive-icon-B3rc85NY.png)Archive - 21(2)(b) Incident handling Firebreak severs governed conduits on alert; restoration is an evidenced Execute event. ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute SEC 02 Continuity and supply chain (Art. 21(2)(c)-(d)) - 21(2)(c) Business continuity and crisis management Offline recovery copies remain reachable even when the live network is gone. ![FV-Archive module icon](/assets/archive-icon-B3rc85NY.png)Archive ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer - 21(2)(d) Supply chain security Vendor reach is severed by default and opened only as a time-bound, scoped session. ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock SEC 03 Acquisition, development, vulnerability (Art. 21(2)(e)-(f)) - 21(2)(e) Security in acquisition, development, and maintenance Maintenance windows are governed Relay sessions with multi-party approval. ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute - 21(2)(f) Effectiveness of measures Validate provides continuous, signed evidence that boundaries hold. ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate SEC 04 Hygiene, cryptography, access (Art. 21(2)(g)-(i)) - 21(2)(g) Cyber hygiene and training Named access removes shared, evergreen credentials from the workflow. ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock ![FV-Unlink module icon](/assets/unlink-icon-B8GFAVW1.png)Unlink - 21(2)(i) Human resources security and access control Trust is revoked at the boundary when relationships end. ![FV-Unlink module icon](/assets/unlink-icon-B8GFAVW1.png)Unlink ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock SEC 05 Authentication and communications (Art. 21(2)(j)) - 21(2)(j) Multi-factor and secured communications Cross-zone reach uses named, scoped, time-bound conduits. ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate Modules & symbols ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Integrity check ![FV-Archive module icon](/assets/archive-icon-B3rc85NY.png)Archive Disconnected copy ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Physical sever ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Approved action ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer Controlled move ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay Time-bound path ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Named access ![FV-Unlink module icon](/assets/unlink-icon-B8GFAVW1.png)Unlink Remove trust ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate Zone boundary Direct map Module satisfies clause Featured In [![TechRadar Pro logo](/press/techradar-pro-logo.svg) ](https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough "Read about Firevault on TechRadar Pro") [![Yahoo Finance logo](/assets/yahoo-finance-logo-white-aNkUpCH7.png) ](https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html "Read about Firevault on Yahoo Finance") [![Channel Insider logo](/assets/channel-insider-logo-white-CFFo4iu7.png) ](https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/ "Read about Firevault on Channel Insider") [![Security Buyer logo](/assets/security-buyer-logo-white-o6oIaBWz.png) ](https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/ "Read about Firevault on Security Buyer") [![SecurityBrief logo](data:image/png;base64,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) ](https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks "Read about Firevault on SecurityBrief") Capabilities ## What you get with every deployment 01 ### EU Data Sovereignty Data residency within UK and EU jurisdictions supports NIS2 requirements for appropriate data handling and sovereignty. 02 ### Management Accountability Documented multi-party authorisation and governance processes demonstrate management oversight required by Article 20. 03 ### Continuous Evidence Automated compliance logging generates continuous NIS2 evidence, eliminating gaps between point-in-time assessments. 04 ### Incident Response Physical zone isolation capabilities support the rapid incident containment required by NIS2 notification timelines. 05 ### Audit-Ready Records Tamper-proof logs provide complete audit trails for every network boundary state, access authorisation, and incident response action. 06 ### Recovery Assurance Verified control-plane baselines demonstrate business continuity capability that exceeds NIS2 operational restoration requirements. Demo to Live ## Adoption Guide Step 1 #### NIS2 Gap Assessment Map your current security measures against NIS2 Article 21 requirements to identify where physical enforcement strengthens your compliance position. Step 2 #### Compliance Architecture Design Design physical zone boundaries and access controls that satisfy and exceed NIS2 requirements for your entity classification. Step 3 #### Evidence Validation Deploy Control in a representative environment to validate compliance evidence generation and prepare for your first NIS2 assessment. Step 4 #### Full Compliance Deployment Organisation-wide deployment with continuous compliance evidence, multi-party governance, and verified control-plane baseline assurance. Step 1 #### NIS2 Gap Assessment Map your current security measures against NIS2 Article 21 requirements to identify where physical enforcement strengthens your compliance position. Step 2 #### Compliance Architecture Design Design physical zone boundaries and access controls that satisfy and exceed NIS2 requirements for your entity classification. Step 3 #### Evidence Validation Deploy Control in a representative environment to validate compliance evidence generation and prepare for your first NIS2 assessment. Step 4 #### Full Compliance Deployment Organisation-wide deployment with continuous compliance evidence, multi-party governance, and verified control-plane baseline assurance. [Organise a Demo](/contact) ## Explore More [ ### DORA Framework Digital operational resilience for financial services. Learn more about DORA Framework ](/solutions/control/frameworks/dora)[ ### Control for Critical Infrastructure National-grade security for essential services. Learn more about Control for Critical Infrastructure ](/control-for-critical-infrastructure)[ ### ISO 27001 Framework Information security management and Annex A controls. Learn more about ISO 27001 Framework ](/solutions/control/frameworks/iso-27001) Questions ## Frequently Asked Which NIS2 articles does Control address? Is physical network segmentation required by NIS2? How does Control support the 24-hour notification requirement? Does Control address supply chain risk requirements?