[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nis2\u002F21-2-i":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nis2","21-2-i","Article 21(2)(i)","Human resources security, access control and asset management (Article 21(2)(i))",0,"Directive (EU) 2022\u002F2555 (NIS2)","**What it asks for.** Point (i) requires measures on human resources security, access control policies and asset management. It links the people who use systems, the rights they have and the assets they use.\n\n**In practice.** The entity screens staff where appropriate, sets security duties in contracts, and runs joiner, mover and leaver processes that grant and revoke access promptly. Access control follows least privilege with periodic reviews, and asset inventories identify owners and criticality. Evidence includes HR procedures, access review records, leaver reconciliations and asset inventories.\n\n**Common gaps.** Access is often not removed promptly when people leave or change role, particularly for contractors. Asset inventories are incomplete, so access control and ownership cannot cover everything that matters.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022L2555#art_21","Read the official text on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":17,"list":18},35,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"crypto-exchange-names-used-to-mask-unauthorized-screenconnect-sessions","Crypto Exchange Names Used to Mask Unauthorized ScreenConnect Sessions","2026-11-14T00:20:22.527+00:00",{"slug":24,"title":25,"published_at":26},"sckit-worm-hijacks-screenconnect-sessions-to-compromise-it-technician-workstations","SCKit Worm Hijacks ScreenConnect Sessions to Compromise IT Technician Workstations","2026-11-13T22:20:58.16+00:00",{"slug":28,"title":29,"published_at":30},"unsecured-ai-agent-exposes-enterprise-to-invoice-fraud-via-email-manipulation","Unsecured AI Agent Exposes Enterprise to Invoice Fraud via Email Manipulation","2026-11-13T16:22:22.358+00:00",{"slug":32,"title":33,"published_at":34},"unauthenticated-ray-agent-enables-hidden-gpu-crypto-mining-via-rootkit","Unauthenticated Ray Agent Enables Hidden GPU Crypto Mining via Rootkit","2026-11-13T16:21:40.741+00:00",{"slug":36,"title":37,"published_at":38},"weak-sql-server-passwords-enable-brute-force-takeover-and-malware-deployment","Weak SQL Server Passwords Enable Brute-Force Takeover and Malware Deployment","2026-11-13T15:20:23.452+00:00",{"slug":40,"title":41,"published_at":42},"state-actors-exploit-telecom-protocols-to-intercept-calls-and-sms-at-network-level","State Actors Exploit Telecom Protocols to Intercept Calls and SMS at Network Level","2026-11-13T13:22:35.957+00:00",{"slug":44,"title":45,"published_at":46},"stolen-credential-exposes-apify-customer-data-highlighting-mfa-and-secrets-management-gaps","Stolen Credential Exposes Apify Customer Data, Highlighting MFA and Secrets Management Gaps","2026-11-13T13:20:22.45+00:00",{"slug":48,"title":49,"published_at":50},"ransomware-groups-weaponize-legitimate-vmware-tools-to-destroy-backups-before-encrypting","Ransomware Groups Weaponize Legitimate VMware Tools to Destroy Backups Before Encrypting","2026-11-13T11:22:12.372+00:00",{"slug":52,"title":53,"published_at":54},"compromised-iam-credentials-and-third-party-vendor-breaches-expose-customer-data-across-multiple-org","Compromised IAM Credentials and Third-Party Vendor Breaches Expose Customer Data Across Multiple Organizations","2026-11-13T11:21:34.52+00:00",{"slug":56,"title":57,"published_at":58},"compromised-github-accounts-weaponized-to-poison-thousands-of-repositories","Compromised GitHub Accounts Weaponized to Poison Thousands of Repositories","2026-11-13T10:20:30.167+00:00",{"slug":60,"title":61,"published_at":62},"north-korean-fake-it-workers-reached-onboarding-and-accessed-sensitive-employee-data","North Korean Fake IT Workers Reached Onboarding and Accessed Sensitive Employee Data","2026-11-13T08:22:51.018+00:00",{"slug":64,"title":65,"published_at":66},"sckit-worm-exploits-msp-remote-tools-via-authentication-flaw","SCKit Worm Exploits MSP Remote Tools via Authentication Flaw","2026-11-12T23:20:21.957+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",20,{"slug":74,"name":75,"problem":76,"stories":77},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",17,{"slug":79,"name":80,"problem":81,"stories":82},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",11,{"slug":84,"name":85,"problem":86,"stories":87},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",7,{"slug":89,"name":90,"problem":91,"stories":92},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",6,{"slug":94,"name":95,"problem":96,"stories":97},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",5,[99,105,111,115,121,125,129,133],{"family":100,"item":101,"code":102,"title":103,"together":104},"cis","6","Control 6","Access Control Management",15,{"family":106,"item":107,"code":108,"title":109,"together":110},"nist-csf","pr-aa","PR.AA-01","PR.AA: Identity Management, Authentication, and Access Control",9,{"family":100,"item":112,"code":113,"title":114,"together":110},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":116,"item":117,"code":118,"title":119,"together":120},"nist-800-53","ac-6","AC-6","Least Privilege",8,{"family":116,"item":122,"code":123,"title":124,"together":87},"ia-5","IA-5","Authenticator Management",{"family":100,"item":126,"code":127,"title":128,"together":92},"13","Control 13","Network Monitoring and Defense",{"family":100,"item":130,"code":131,"title":132,"together":97},"5","Control 5","Account Management",{"family":100,"item":134,"code":135,"title":136,"together":137},"12","Control 12","Network Infrastructure Management",4]