NIS2 compliance management #

The /nis2 route provides a dedicated view of the compliance engine for the NIS2 framework. It does not duplicate data: it selects the installed NIS2 pack and latest assessment, then presents requirements, gaps, evidence and remediation directly.

Prepare the view #

1. Install packs with php bin/console app:compliance:install-starter-packs.
2. Under Compliance, create an NIS2 assessment for the required scope.
3. Record status, maturity, evidence and corrective action for every requirement.
4. Open /nis2 to monitor the latest available assessment.

Without the pack, the screen requests installation. Without an assessment, it redirects users to Compliance. The view installs nothing and does not edit results.

Displayed indicators #

Cards show the global score and counts of compliant, partially compliant and non-compliant requirements. The progress bar uses the assessment score. The table lists requirement reference and title, status, maturity out of 5, evidence count and linked corrective action.

Scoring follows the compliance engine exactly: NOT_APPLICABLE and NOT_ASSESSED requirements are not treated as compliant. This is a management view; enter or correct results under /compliance to preserve one authoritative workflow.

Permissions and security #

nis2.read controls viewing and nis2.update controls changes on authorized surfaces. Organization RBAC can override defaults. Frameworks and assessments are resolved server-side; results, evidence and corrective actions remain tenant-scoped.