NIS2 • ISO 27001 • CIS • GDPR • SOC 2 • PCI DSS

    NIS2 Article 21:
    All 10 Measures Covered

    130+ automated controls mapped to NIS2, ISO 27001, CIS Controls v8.1, GDPR, SOC 2 and PCI DSS. FlowPro evaluates them from your own logs and network data and prepares the reports for the audit.

    Security + NIS2 Compliance Pack costs €5,183 a year, less than one day of a NIS2 consultant.

    flowpro.local/compliance
    NIS2 Compliance
    Maximum fine or 2% of global turnover — whichever is higher
    €10M
    Maximum fine or 2% of global turnover — whichever is higher
    Significant incident early warning deadline under NIS2 Article 23
    24h
    Significant incident early warning deadline under NIS2 Article 23
    Automated controls across 6 compliance frameworks in FlowPro
    130+
    Automated controls across 6 compliance frameworks in FlowPro

    Article 21

    Which Module Covers Which Measure

    Article 21 lists 10 cybersecurity measures every obliged organisation must implement. Next to each one you see the FlowPro modules that support it.
    1. a)

      Risk analysis and information system security policies

      Security ScoreNIS2 Compliance
    2. b)

      Incident handling and reporting

      Event CenterLog ExplorerIDS (Suricata)
    3. c)

      Business continuity, backup management, disaster recovery

      NIS2 ComplianceUptime Monitor
    4. d)

      Supply chain security and third-party risk

      CVE MonitorCVE ↔ AssetsShodan Monitor
    5. e)

      Network and information system security, vulnerability handling

      IDS (Suricata)CVE MonitorThreat IntelligenceSecurity Score
    6. f)

      Policies to assess effectiveness of cybersecurity measures

      Security ScoreNIS2 Compliance
    7. g)

      Basic cyber hygiene practices and cybersecurity training

      NIS2 ComplianceNIS2 Compliance AI Chat
    8. h)

      Policies and procedures for use of cryptography and encryption

      Certificate / PKI
    9. i)

      Human resources security, access control, asset management

      Asset InventoryLog ExplorerNIS2 Compliance
    10. j)

      Use of multi-factor authentication and secure communications

      NIS2 ComplianceLog Explorer

    Compared with spreadsheets

    Compliance That Keeps Itself Up to Date

    1. 01

      Evaluated Continuously

      All 130+ controls are re-evaluated automatically from the data FlowPro collects. You see the current state on any day, not only after the annual audit.

    2. 02

      Evidence for the Auditor

      PDF and CSV reports for auditors and management. Each control is approved by a named person and every change is recorded in the audit log.

    3. 03

      Six Frameworks at Once

      NIS2, CIS Controls v8.1, ISO 27001, GDPR, SOC 2 and PCI DSS. One control often satisfies several frameworks, so you do the work once.

    Cost comparison

    FlowPro NG vs. NIS2 consultant

    FlowPro NG

    €5,183/yr

    Security license + NIS2 Compliance Pack (annual billing)

    • 130+ automated controls, evaluated continuously
    • All 10 NIS2 Article 21 measures covered
    • 6 frameworks: NIS2, ISO 27001, CIS, GDPR, SOC 2, PCI DSS
    • NIS2 Compliance AI Chat that answers with article references
    • Audit-ready PDF + CSV reports
    • IDS, CVE monitoring, Threat Intelligence and Security Score included
    • Data stays on your server, no dependency on a cloud service
    Order Now

    NIS2 Consultant

    €5,000–15,000/yr

    Initial assessment only, recurring costs extra

    • Point-in-time assessment (1–2x per year)
    • Manual spreadsheet-based gap analysis
    • Covers NIS2 only (additional fees for ISO 27001)
    • No AI assistant for compliance questions
    • Report delivery takes weeks
    • No real-time monitoring or alerts
    • Your security data shared with a third party

    NIS2 Compliance Pack

    What's in the NIS2 Compliance Pack

    NIS2 Compliance
    • 130+ automated controls across 6 frameworks
    • 14 tabs: Overview, Assessment, Risk Heatmap, Evidence, Builder…
    • 5 check types: ES query, PG query, API, config, manual
    • Approval workflow with attestations and a full audit trail
    • PDF and CSV export for auditors
    NIS2 Compliance AI Chat
    • RAG chatbot trained on the full NIS2 directive text
    • 221 semantic chunks, pgvector embeddings (768-dim, nomic-embed-text)
    • Ask in plain language and get answers with NIS2 article references
    • Answers stream over WebSocket as they are generated
    • Runs on a local LLM (qwen2.5:72b), data never leaves your server

    Get Ready for the NIS2 Audit

    Security + NIS2 Compliance Pack covers all 10 measures of NIS2 Article 21 and adds IDS, CVE monitoring and Threat Intelligence, for €5,183 a year. Full AI analysis, honeypots and Shodan are part of the Enterprise license.