ISMS & Risk

Supervisory file

Four legal acts, one pattern, one file

NIS2 under BSIG, the KRITIS umbrella act, Section 11 EnWG and EASA Part-IS follow the same pattern: determine applicability, register with an authority, provide evidence, report incidents. That is why the file exists once and not again in every specialist module. It answers four questions in one place: who is in charge, under which reference the matter runs, which obligations fall due when, and what has gone back and forth with the authority. A file is created in the specialist module once a facility’s applicability has been determined; there is deliberately no "add supervisory file", because a file without applicability would have no anchor for a deadline.

NIS2KRITIS-DachgesetzEnWGEASA Part-IS
Features

Your benefits

1

Submitted is the anchor, not confirmed

An authority’s confirmation can take weeks and is nothing an evidence cycle may wait for. So follow-up obligations run from "submitted on". The field "confirmed on" documents the reply; only where a legal act expressly ties to it does it count from there.

2

The status is where the matter stands

In preparation, submitted, confirmed, change to report, deregistered: each status determines which deadlines run. The deadline for a change notification runs in days, not months, and a deregistered file remains as evidence while all warnings fall silent.

3

The file knows no standard

What applies for a regime is set by the regime: the specialist module supplies the obligations with legal basis, you maintain the status, not the catalogue. If no specialist module is active, the page says exactly that and stays empty, because there is nothing to keep.

Capabilities

All capabilities at a glance

  • One file per facility and regime with authority, reference, contacts and proof of submission
  • Versioned registration details so that the state of every submission remains traceable
  • Obligations one-off, recurring and event-driven, with legal basis, due date and processing status
  • Deadline monitoring with early warning and escalation; authority deadlines of all files in one list
  • Correspondence with the authority with reply deadlines, authority letters in the DMS
  • Regimes from NIS2 (BSIG Sections 28, 33, 34, 39), KRITIS umbrella act, Section 11 EnWG and EASA Part-IS
  • Read and maintain rights separated; a file arises only from a determined applicability
Result

An answer to the question "what falls due with which authority when" that does not have to be searched for in four modules and three mailboxes.

Experience Supervisory file live

Schedule a no-obligation demo – we will show you the module with your own use cases.