Skip to content
Cyber Compliance

CIS Controls v8 → NIS2 crosswalk

A control-by-control mapping between CIS Critical Security Controls v8 and NIS2 Directive (EU 2022/2555). 2 mappings.

CIS Controls v8NIS2RelationshipNotes
3.11
Encrypt sensitive data at rest
Art. 21(2)(h)
Cryptography and encryption
EquivalentCurated
Cryptography & data protection
6.1
Establish an access granting process
Art. 21(2)(i)
Access control and asset management
PartialCurated
Access control & identity

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.