Changelog

Curated list of meaningful changes to the platform, course, and compliance documents. Not a full commit history - only what matters to users, buyers, and auditors.

April 2026

·Product
Open-source repos published: gap assessment + supplier questionnaire

Two repositories under github.com/NISD2: nis2-gap-assessment-schema (116 questions, 15 domains, Zod schema with scoring logic) and nis2-supply-chain-questionnaire-schema (56 fields, 6 sections). Dual-licensed (MIT for code, CC BY 4.0 for content). Every question and field is anchored to a specific legal source.

Open Source overview

·Content
Public changelog launched

New /changelog page documents visible changes to the platform, course, and compliance documents - curated, not every commit. Filterable by category (product, content, course, compliance, regulatory) with monthly headers.

Changelog

·Content
Fine framing: added 2% of global turnover as an alternative ceiling

Landing page now shows the full NIS2 fine ceiling: up to €10M or 2% of global group turnover, whichever is higher. Previously only the €10M figure was shown.

·Compliance·compliance-docs-v1
Published Art. 28 DPA and Art. 32 TOMs

New public documents at /avv and /toms. Audit log now captures IP address and user agent on every authenticated mutation. AWS S3 sets AES256 server-side encryption explicitly on every upload. Dependabot is enabled. Impressum extended with EUID, § 18(2) MStV responsibility, and EU online dispute resolution.

View DPAView TOMs

·Content
Team page with photos, bios, and responsibilities

Dedicated /about page with managing director Simon Orzel and COO Cory Sales. Clear responsibilities and backgrounds — visible in the top navigation.

About

·Course
Dutch version of the CEO course

The NIS2 CEO course is now also available in Dutch — complete translation of all 47 lessons.

Training portal

·Course
German translations: 329 terms + 47 lesson titles + 45 quizzes

Full German localisation of the CEO course: 329 dictionary terms, 47 lesson titles, 45 quizzes — with proper umlauts, BSIG terminology, and article format.

·Product
NIS2 Gap Assessment: 116 questions, 15 domains, 5-day structure

Public NIS2 gap assessment with 116 structured questions across 15 domains, designed for a 5-day completion. PDF export of results available.

Gap assessment

·Regulatory
Netherlands passes NIS2 + ENISA NCAF 2.0

Dutch NIS2 transposition tracked in /nis2-timeline. Also: ENISA NCAF 2.0 update and NL registration portal status refreshed.

Timeline

·Content
National NIS2 registration portals for all EU member states

Consolidated overview of all national NIS2 registration portals across the EU with status, direct links, and per-country instructions.

Registration portals

·Product
Course completion certificate (HTML, printable as PDF)

CEO course participants receive a citable HTML certificate on completion, printable as PDF.

·Compliance
Landing badges: BSIG § 30 + IT-Grundschutz

CIR badge replaced with BSIG § 30 + IT-Grundschutz on the landing page — more precise anchoring in the German transposition.

February 2026

·Product
Module-backed requirements with cross-framework satisfaction

Requirements can now be satisfied through operational modules (asset inventory, risk register, suppliers, incidents) rather than separate forms — the platform itself is the evidence.