How Bsure helps organizations meet the requirements of the NIS2 directive

Henrik Skalmerud

April 14, 2025

NIS2 isn’t just about new regulations – it’s about gaining control. Here’s how Bsure gives you the visibility you need to get started and comply with some of the regulations.

The NIS2 directive introduces stricter requirements for IT security across both public and private organizations throughout the EU and EEA. At its core, it’s about reducing risk, controlling who has access to what – and making sure security efforts are actually followed up in practice.

For many organizations, the biggest challenge isn’t the willingness to improve security – it’s the lack of visibility.
Bsure doesn’t solve everything – but we help you take control of several of the most important areas NIS2 focuses on.
Several EU countries, such as Sweden, are in the process of implementing NIS2 into national law. The requirements already apply – and Bsure helps you stay ahead.

We help you gain visibility

Bsure connects to Microsoft Entra ID (formerly Azure AD) and provides a clear, up-to-date view of the most important parts of your IT environment. Many of our features directly support the requirements laid out in Article 21 of the NIS2 directive – which outlines the minimum technical and organizational security measures organizations must have in place.

  1. Users and access

    NIS2 Requirement: Only authorized users should have access to systems and data. There must be routines for granting and removing access. Bsure gives you visibility into:

    • Who has access to your systems and applications

    • Users without Multi-Factor Authentication (MFA)

    • Guest accounts and inactive users

    • Users with privileged access

    This provides a strong foundation for risk-based access management – a key requirement in NIS2.


  2. Applications and License Usage

    NIS2 Requirement: Organizations must maintain an overview of the systems they use and how they are accessed. Bsure shows you:

    • Which applications are in use via Entra ID

    • Who is using them

    • Where licenses are unused or misused

    This helps you clean up access, reduce risk, and eliminate unnecessary costs.


  3. Devices

    NIS2 Requirement: Devices connected to the network must be secure and documented. Bsure provides insight into:

    • Which devices are connected to Entra ID

    • Device type, operating system, and last activity

    • Potential risk factors like outdated or inactive devices

    This gives you better visibility and helps identify vulnerabilities in your technical environment.


  4. Documentation and Follow-Up

    NIS2 Requirement: Organizations must be able to document security measures and incident handling. Bsure makes it easy to:

    • Track and respond to risks and deviations

    • Prioritize actions based on real insight

    • Document your security efforts for leadership, auditors, and regulatory bodies

A practical path to NIS2 compliance

Bsure is not a tool that covers every aspect of the NIS2 directive. But we help you with the essentials: gaining visibility, cleaning up access, and reducing digital risk in your organization’s environment.

It’s not about adding yet another complex system – it’s about gaining control of what you already have.

© 2025 Bsure AS All Rights Reserved.

Contact us

Bsure AS

Torvveien 19



1383 Asker

Norway

+47 64 80 82 22

ID: 929 419 766

Contact us

Bsure AS

Torvveien 19



1383 Asker

Norway

+47 64 80 82 22

ID: 929 419 766

2025 Bsure AS All Rights Reserved.

© 2025 Bsure AS All Rights Reserved.

Contact us

Bsure AS

Torvveien 19



1383 Asker

Norway

+47 64 80 82 22

ID: 929 419 766