Do I need NDR for NIS2?
NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. does not name NDRNDR: network detection and response. Security monitoring that watches the traffic between devices and raises an alert when one behaves like an attacker., but it does require you to detect and handle incidents and to report significant ones on a fixed timeline. Article 21 lists incident handling among the required risk-management measures; Article 23 sets an early warning within 24 hours, a notification within 72 hours and a final report within one month. Network monitoring is one practical way to detect incidents in time and keep the evidence those reports need, and NetSenX tracks the Article 23 deadlines for each incident. The duties sit with your organisation: no tool fulfils them on its own.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
This answer also appears, with more context, here: NetSenX home page
Read next
Related questions
Terms used here
- NIS2 (the EU's second Network and Information Security directive)
- The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies.
- NDR (network detection and response)
- Security monitoring that watches the traffic between devices and raises an alert when one behaves like an attacker.