NIS2 without spreadsheets or a team of specialists
Triconform tells you which obligations apply, gives you a list of measures with a place for evidence and tracks incident reporting deadlines. One person can handle it alongside their day job.
What you keep in Triconform
What obligations do we have
The guide goes through your situation and shows whether the higher or lower obligations regime applies, and what follows from it.
Catalogue of measures
Measures under the relevant decree, each with evidence, an owner and a status. Once a year management approves the overview – and that is recorded too.
Incidents and reports
Assessment of incident significance and a countdown for 24 h, 72 h and 30 days. Report drafts follow the structure of the NÚKIB portal (the Czech cybersecurity authority); you submit them.
DORA inputs
Financial entities and their ICT suppliers keep DORA inputs for the Czech National Bank in the same record.
Policies and acknowledgement
Policies in one place with confirmation that employees have read them. You see who has not yet confirmed.
Suppliers and contracts
A list of suppliers, their importance and a check of security clauses in contracts under Annex 2 of the decree.
Assets and risks
An overview of assets and a simple risk assessment, without a complicated methodology.
Tasks and reminders
Tasks with deadlines and owners, e-mail reminders and the “This week” screen.
Deadline calendar
Export deadlines to your own calendar in .ics format.
Software you use
Even a company that makes nothing is exposed through the software it uses. Triconform watches it for you.
Records even without a version
Write down what you use – operating systems, firewall, accounting software, web services. It is fine if you do not know the exact version.
Vulnerabilities and end of support
We flag new vulnerabilities and approaching end of support, so you can plan replacements in time.
Weekly summary
Once a week, an overview of what has changed. No flood of e-mails.
Immediate alerts only for serious issues
We alert you straight away only for a vulnerability that is already being actively exploited.
What stays with you
- You decide whether a measure is sufficient. The tool does not assess compliance.
- You submit incident reports on the authority’s portal. Your organisation is responsible for submitting on time.
- Reminders do not replace your own backup procedure, so also export deadlines to your own calendar.
Try Triconform with your own data
30-day trial access free of charge, with no commitment. Write to us and we will set up your access within 2 working days – or book a short demo first.