[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nis2\u002F21-2-g":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nis2","21-2-g","Article 21(2)(g)","Basic cyber hygiene practices and cybersecurity training (Article 21(2)(g))",0,"Directive (EU) 2022\u002F2555 (NIS2)","**What it asks for.** Point (g) requires basic cyber hygiene practices and cybersecurity training. This covers foundational controls and making sure people understand their part in security.\n\n**In practice.** The entity enforces hygiene measures such as patching, secure configuration, strong authentication, least privilege, backups and email protection, and runs regular awareness training for all staff with role based content where needed. Training is tracked and its effect measured, for example through phishing simulations and incident reporting rates. Evidence includes hygiene control reports, training plans and completion records.\n\n**Common gaps.** Training is often limited to an annual module with no measurement of behaviour. Basic hygiene controls may be strong on corporate devices but weak in cloud and OT environments.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022L2555#art_21","Read the official text on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":17,"list":18},32,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"north-korean-deepfake-campaign-steals-400m-in-crypto-via-social-engineering","North Korean Deepfake Campaign Steals $400M in Crypto via Social Engineering","2026-11-14T16:20:41.268+00:00",{"slug":24,"title":25,"published_at":26},"gta-vi-hype-fuels-malware-laden-scams-targeting-gamers","GTA VI Hype Fuels Malware-Laden Scams Targeting Gamers","2026-11-14T15:20:40.159+00:00",{"slug":28,"title":29,"published_at":30},"ai-assisted-ransomware-lowers-the-bar-for-attackers","AI-Assisted Ransomware Lowers the Bar for Attackers","2026-11-14T14:20:39.616+00:00",{"slug":32,"title":33,"published_at":34},"phishing-campaign-exploits-real-microsoft-365-outage-to-steal-credentials","Phishing Campaign Exploits Real Microsoft 365 Outage to Steal Credentials","2026-11-14T11:20:25.348+00:00",{"slug":36,"title":37,"published_at":38},"north-korean-actors-use-ai-deepfakes-and-social-engineering-to-steal-12b-in-crypto","North Korean Actors Use AI Deepfakes and Social Engineering to Steal $1.2B in Crypto","2026-11-13T22:21:35.043+00:00",{"slug":40,"title":41,"published_at":42},"ai-powered-attack-tool-artex-enables-machine-speed-intrusions-by-low-skill-actors","AI-Powered Attack Tool Artex Enables Machine-Speed Intrusions by Low-Skill Actors","2026-11-13T22:20:40.075+00:00",{"slug":44,"title":45,"published_at":46},"fake-interview-assignments-weaponize-npm-packages-to-compromise-developer-machines","Fake Interview Assignments Weaponize npm Packages to Compromise Developer Machines","2026-11-13T18:21:36.396+00:00",{"slug":48,"title":49,"published_at":50},"gootloader-malware-enabled-44-ransomware-attacks-via-seo-poisoning-and-weak-endpoint-defenses","Gootloader Malware Enabled 44 Ransomware Attacks via SEO Poisoning and Weak Endpoint Defenses","2026-11-13T17:21:02.612+00:00",{"slug":52,"title":53,"published_at":54},"north-korean-deepfake-video-calls-drain-400m-in-crypto","North Korean Deepfake Video Calls Drain $400M in Crypto","2026-11-13T16:23:15.645+00:00",{"slug":56,"title":57,"published_at":58},"gootloader-takedown-exposes-risks-of-compromised-websites-and-access-as-a-service-malware","Gootloader Takedown Exposes Risks of Compromised Websites and Access-as-a-Service Malware","2026-11-13T16:22:57.628+00:00",{"slug":60,"title":61,"published_at":62},"fake-gta-6-download-delivers-credential-stealing-malware","Fake GTA 6 Download Delivers Credential-Stealing Malware","2026-11-13T16:22:38.997+00:00",{"slug":64,"title":65,"published_at":66},"typosquatting-ai-domains-deliver-malware-via-fake-verification-pages","Typosquatting AI Domains Deliver Malware via Fake Verification Pages","2026-11-13T16:20:24.722+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",20,{"slug":74,"name":75,"problem":76,"stories":77},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",17,{"slug":79,"name":80,"problem":81,"stories":82},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",11,{"slug":84,"name":85,"problem":86,"stories":87},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",9,{"slug":89,"name":90,"problem":91,"stories":92},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",8,{"slug":94,"name":95,"problem":96,"stories":97},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",4,[99,105,110,114,119,124,129,133],{"family":100,"item":101,"code":102,"title":103,"together":104},"cis","14","Control 14","Security Awareness and Skills Training",15,{"family":106,"item":107,"code":108,"title":109,"together":82},"mitre-attack","t1566","T1566","Phishing",{"family":5,"item":111,"code":112,"title":113,"together":92},"21-2-j","Article 21(2)(j)","Multi-factor authentication and secured communications (Article 21(2)(j))",{"family":100,"item":115,"code":116,"title":117,"together":118},"9","Control 9","Email and Web Browser Protections",6,{"family":106,"item":120,"code":121,"title":122,"together":123},"t1204-002","T1204.002","Malicious File",5,{"family":125,"item":126,"code":127,"title":128,"together":123},"nist-800-53","si-3","SI-3","Malicious Code Protection",{"family":100,"item":130,"code":131,"title":132,"together":97},"7","Control 7","Continuous Vulnerability Management",{"family":100,"item":134,"code":135,"title":136,"together":97},"2","Control 2","Inventory and Control of Software Assets"]