# Does an ISO 27001 certificate mean we meet NIS2?

Not automatically, although it covers much of the ground. ISO/IEC 27001 gives you a risk-based management system and controls that overlap strongly with the cybersecurity risk-management measures NIS2 requires, such as incident handling, business continuity, supply-chain security, access control and cryptography. But NIS2 is law and the certificate is a voluntary standard, and they differ in places. NIS2 has its own staged incident reporting under Article 23 to a national authority, specific duties for management bodies including training and accountability, registration with the authority, and national rules that can go further. A certificate also covers only its stated scope, which may leave out the very services NIS2 applies to. Use your ISMS as the backbone: map each NIS2 measure to your controls, close the gaps such as the reporting procedure and management training, and make sure the scope includes every in-scope service. Check your national NIS2 law and whether it refers to standards. NetSenX tracks NIS2 reporting deadlines per incident; it does not assess your certificate or your NIS2 status.

FAQ: [Security standards: ISO 27001, SOC 2](https://netsenx.com/en/faq/standards) · https://netsenx.com/en/faq/does-iso-27001-cover-nis2

## Read next

- https://netsenx.com/en/compliance
- https://netsenx.com/en/security
- https://netsenx.com/en/nis2-readiness

## Related questions

- [Which ISO 27001 controls does network monitoring help with?](https://netsenx.com/en/faq/which-iso-27001-controls-does-network-monitoring-support)
- [Does NetSenX hold ISO 27001 or SOC 2 certification?](https://netsenx.com/en/faq/what-certifications-does-netsenx-hold)
- [What is the NIST Cybersecurity Framework 2.0?](https://netsenx.com/en/faq/what-is-nist-csf-2)
- [What is BSI IT-Grundschutz?](https://netsenx.com/en/faq/what-is-bsi-it-grundschutz)
- [What is the difference between a certification and an attestation report?](https://netsenx.com/en/faq/certification-vs-attestation-what-is-the-difference)