Regulations & frameworks
Compliance that stands up to the regulator
Find the regime that applies to you and see how we help you meet it. Each name links to the official source.
| Regulation or framework | Region | What it covers | How we help |
|---|---|---|---|
| NIS2 Directive (EU) 2022/2555 eur-lex.europa.eu | European Union | EU directive on cyber risk management and incident reporting for essential and important entities. | Applicability review, risk management measures, supplier oversight. |
| DORA Regulation (EU) 2022/2554 eur-lex.europa.eu | European Union | Digital operational resilience for financial entities and their ICT providers. | ICT risk framework, resilience testing, third-party register. |
| GDPR Regulation (EU) 2016/679 eur-lex.europa.eu | European Union | General Data Protection Regulation: lawful processing, security of processing and breach notification. | Privacy impact assessments, technical safeguards, breach readiness. |
Descriptions are summaries to orient you, not legal advice. Links go to the publisher's page and may change. Check the current text and any amendments before relying on a requirement. NAPSECURE is an advisory firm and does not issue certifications or regulatory approvals.
Not sure which rules apply?
We will map your obligations and show the shortest path to evidence.