Platform · People and policies

Approved policies, acknowledgements and training recorded for each person, directors included.

NIS2 requires security training for members of the management body (art. 20) and cyber hygiene practices and training for staff (art. 21.2(g)); art. 21.2(i) covers human resources security and access control. EVIDEVO records policy versions and approvals, collects acknowledgements, assigns training by role and handles joiners, movers and leavers with access checklists.

Let's talk Starting assessment

Data for illustrative purposes only, not real

The problem

01

Policies with no record of reading

Documents published in a shared folder, with no record of who has read them.

02

Training without proof

Training takes place, but attendance and completions are not recorded in a verifiable way.

03

Joiners and leavers

Access left active for leavers, new hires missing basic instructions.

What it does

Policies with versions and approvals, acknowledgements and training recorded for each person.

  • Versioned policies

    Starting templates, revisions, formal approval and version history.

  • Acknowledgements

    Each person confirms reading the version in force. Those who do not confirm receive an automatic reminder.

  • Training by role

    Paths for staff and the management body, with completions on record.

  • Joiners, movers, leavers

    Checklists to grant and revoke access, with evidence for each step.

  • Personal tasks

    Each person sees only the tasks that concern them, ordered by deadline.

  • Linked to controls

    Acknowledgements and training completions become evidence for the linked controls.

The outcome

  • For each policy: the version in force, who approved it and who has acknowledged it
  • Training completions recorded per person, management body included
  • For each leaver: the access revocation checklist, with evidence for each step

Related frameworks

Other capabilities

A thirty-minute presentation based on the organisation's scope.

It starts from the frameworks in scope and how the work is organised today. In thirty minutes, EVIDEVO is shown working in that context.

Let's talk