Vardion

NIS2 compliance software

The ΕΑΚ gap analysis and self-assessment, ready policies and the evidence your auditor asks for, in one place.

  • Policies ready to adopt, not written from scratch
Live findings mapped to the controls of each framework, NIS2, DORA and KYA 1689/2025 among them

ΕΑΚ gap analysis and self-assessment

Both instruments of the National Cybersecurity Authority (ΕΑΚ) in its own Greek, with your score rising as gaps close.

  • Gap analysis: 169 controls in 24 sections, exported in the authority's own columns
  • Self-assessment: 234 questions, scored as the authority's tool scores them, in its file format
Read the KYA 1689/2025 guide
An ΕΑΚ gap analysis with its compliance figure and the score for each section

Policies, registers and evidence

Ready-made policies

16 policies and procedures in Word, including the 12 that KYA 1689/2025 names.

Reporting deadlines

NIS2, GDPR and Cyber Resilience Act clocks, with notifications drafted from your facts.

Risk and exception registers

Each risk with its owner and review date.

Supplier grades

A to F from public DNS and certificate records, weekly for the critical ones. Questionnaires go out from the console.

Does NIS2 apply to you?

NIS2 covers medium and large companies in 18 sectors, and some smaller ones. Vardion records the answer as a scope memo your management signs.

Security questionnaires

Answer from your records

Start from a supplier due diligence or DORA third-party template. Each item links to the register or document that covers it.

Send the answer pack

Every answer and record together, with a checksum for each file.

DORA compliance

Register of information

Every missing mandatory field named by its code, with the EBA filing package ready to download.

ICT incident reports

The 4-hour, 72-hour and final reports, each drafted from your facts.

Read the DORA register guide

Framework mapping

NIS2All 10 areas of Article 21, each with its evidence
KYA 1689/2025All 22 requirement articles, mapped to their controls
DORAThe 15 articles on ICT risk, incidents, testing and third parties
ISO/IEC 27001The Statement of Applicability for all 93 Annex A controls

Frequently asked questions

Can we start on the hosted console?

Yes. Assessments, policies, registers and reports run there from day one, in Greek and English.

See your NIS2 programme in a demo