Compliance
No product can meet the requirements of NIS2 on its own
A product can help you meet some of the requirements in laws and standards, but never all of them. That is why we show exactly which requirements XoT helps with.
NIS2
NIS2 is the EU directive on cybersecurity. In Sweden it applies through the Swedish Cybersecurity Act. We go through the ten areas in which the directive sets requirements.
IEC 62443
IEC 62443 is a series of standards for security in industrial control systems. It describes how you divide a plant into zones and sets seven foundational requirements.
Cyber Resilience Act
The Cyber Resilience Act is an EU regulation. It sets requirements for products with digital elements, meaning both hardware and software. We explain what it means for you as a buyer.
Our position
What XoT helps with
NIS2 and IEC 62443 both set requirements for how you control access to your systems. XoT helps with several of those requirements.
But some requirements are outside what XoT does. We would rather tell you that ourselves than have you find out later.
XoT helps with
- controlling who gets access
- encrypting the traffic
- checking the user's identity twice a minute
- limiting which traffic reaches the equipment
- logging who has been connected
XoT does not help with
- risk analysis
- procedures for handling incidents
- plans to keep the business running during disruptions
- security training
- contracts with vendors and following them up
- checking that the measures work
What we write on these pages is our interpretation of the regulations. It is not legal advice. Always check what applies to your sector.
Do you need material for a procurement?
We answer technical questions in requirement specifications and explain what XoT does.