Platform · Management body reporting

NIS2 art. 20: the management body approves the measures, oversees their implementation and is accountable.

NIS2 art. 20 gives management bodies the approval of cybersecurity risk-management measures, oversight of their implementation and liability for infringements, and requires their members to follow training. DORA (art. 5) makes the management body responsible for the ICT risk management framework. EVIDEVO produces the meeting report, with status by framework, top risks and decisions to take, and records approvals and acceptances with date and signatory.

Let's talk Starting assessment

Data for illustrative purposes only, not real

The problem

01

Accountability without a clear view

Directors are accountable for the measures but receive fragmented information.

02

Hand-made reports

Every meeting needs new slides, built by collecting data from several people.

03

Decisions disconnected from controls

Approvals and acceptances stay in the minutes, with no link to the controls and risks they refer to.

What it does

Status by framework, top risks and recorded approvals, for the management body.

  • Status by framework

    Score, trend and gaps, calculated from the status of controls in the platform.

  • Top risks

    High risks and acceptances awaiting approval.

  • Recorded approvals

    Measures, policies and residual risks approved with date and signatory.

  • Meeting report

    One document per meeting, generated by the platform and written for non-technical readers.

  • Trend over time

    Comparison with the previous quarter: what improved and what did not.

  • Director training

    The training required by NIS2 art. 20, recorded for each member.

The outcome

  • A meeting report with status by framework, top risks and decisions to take
  • Approvals of measures, policies and residual risks, with date and signatory
  • A comparison with the previous period, framework by framework

Related frameworks

Other capabilities

A thirty-minute presentation based on the organisation's scope.

It starts from the frameworks in scope and how the work is organised today. In thirty minutes, EVIDEVO is shown working in that context.

Let's talk