NIS 2 Directive
EU Directive on measures for a high common level of cybersecurity across the Union (NIS2), including risk-management measures and incident reporting obligations for essential and important entities.
Framework mapping summary
Catalog entry
Type: Regulation
Publisher: European Union
Versions: 1
Coverage (representative version)
Requirements
49
Mapped controls
39
Evidence specs
92
Automation tests
15
Supported versions and coverage stats
Directive (EU) 2022/2555
Requirements
49
Mapped controls
39
Evidence specs
92
Automation tests
15
Framework mapping is only useful when it produces proof.
Scope and control mapping
- Map requirements to Aurora controls
- Assign owners and approval gates
- Keep decisions tied to exports
Evidence and freshness
- Attach artifacts to controls and answers
- Track capture dates and expiration
- Export binder-ready folders with provenance
Reviewer-ready exports
- Generate proof packs and binder exports
- Produce point-in-time snapshots for assessment windows
- Keep citations attached so reviewers can verify
Controlled sharing
- Share curated artifacts through a Trust Center
- Gate access with tier rules and agreements
- Export access logs for audit trails
See how this maps to your next reviewer request
Use exports to align on scope
Start with the deliverable reviewers accept, then map backward to the controls and evidence you need.
Bring one request, get a plan
We will map the shortest path: required controls, evidence objects, integrations, and the export format reviewers expect.
FAQ
Does this mean Aurora certifies us?
Does this mean Aurora certifies us?
No. Aurora helps you map requirements to controls and export proof. Certification decisions remain with your auditors and certification bodies.
Can we run multiple frameworks in one system?
Can we run multiple frameworks in one system?
Yes. Aurora is designed for reusable control mapping and evidence so you can expand without redoing work.
Can we start without integrations?
Can we start without integrations?
Yes. Manual uploads and mapping work on day one, and you can add connectors on your schedule.
Want a proof pack for your framework?
View the export formats first, then we will map the shortest path to reviewer-ready proof.
Have a deadline? Tell us. We can prioritize export-ready proof.