NIS2 Support Matrix
Status: DRAFT
NIS2 is an organizational cybersecurity regime, not a product certification. This matrix documents how the EMS product can support an operator’s security controls.
| Operational capability | Product support | Status |
|---|---|---|
| Access control | NATS JWT + VPN | PARTIAL |
| Least privilege | per-device NATS ACL intended | VERIFY |
| Incident investigation | audit/logging TODO | TODO |
| Vulnerability management | process TODO | TODO |
| Secure update capability | signed OTA TODO | TODO |
| Business continuity / resilience | local supervisor/offline behavior | PARTIAL |
| Supply-chain visibility | SBOM TODO | TODO |
| Credential lifecycle | revocation/rotation to document | VERIFY |